Your company needs to setup a new Internet website server to keep all clients updated on company news and provide relevant business information. You have also been asked to setup a secure FTP server so that the web developer can transfer new web pages to the web server securely. You decide to use the new IIS features in Windows Server 2008 to meet both of these needs.
In this exercise you will be required to Power On and connect to the following servers from your Practice-Lab application:
Domain Controller
If this is the first time you are accessing a Practice-Lab why not take a few minutes to watch our video on getting started, or if you are still having difficulty connecting to your Practice-Lab device please refer to our help pages.
Installing IIS
Step 1
Connect to the Domain Controller in the Practice-Lab , then when the desktop appears, click Start, point to Administrative Tools and then clickServer Manager (or click the server manager icon in the quick launch bar).
ClickRoles in the left hand pane and then clickAdd Roles in the right hand pane.
Use the Add Roles Wizard to add the Web server (IIS) role.
Click next then accept the default choices. Whilst IIS is installing switch server to theDomain Server.
From theDomain Server in the Practice-Lab , install the IIS management console by opening Server Manager, expand roles then right clickWeb Server IIS and select add role services.
Select IIS Management Console and FTP Server from the options.
ClickNext and theninstall.
Step 2
Once installed, launch the IIS Manager by going to run and typing in:inetmgr or navigate to administrative tools and launch from there.
If you compare the Domain Controller installation versus the Domain Server installation (once you have installed the features) you will notice, when you open up the IIS manager there is no option to configure an FTP site on the default installation (the install you ran on the Domain Controller), but on the Domain Server you are able to create an FTP site now that you have installed the features.
Creating a FTP Site Using the FTP Site Wizard and setting the permissions
Step 1
On the Domain Server, create a folder atc:\inetpub\ftproot calledftptest
Set the permissions to allow anonymous access:
Open a command prompt. Type the following command:
cacls c:\inetpub\ftproot\ftptest /G IUSR:R /T /E
Close the command prompt
Syntax Explanation
/G user:permission Grant specified user access rights.
/T Changes ACLs of specified files in the current directory and all subdirectories.
/E Edit ACL instead of replacing it.
Step 2
Open IIS Manager. In the Connections pane, click the Sites node in the tree. As shown in the image below, right-click the Sites node in the tree and click Add FTP Site, or click Add FTP Site in the Actions pane.
When the Add FTP Site wizard appears:
EnterMy FTP site in the FTP site name box, then navigate to theC:\inetpub\ftproot\ftptest folder that you created previously.
Note: that if you choose to type in the path to your content folder, you can use environment variables in your paths.
When you have completed these items, click Next.
On theBindings and SSL Settings page of the wizard choose an IP address for your FTP site from the IP Address drop-down, or choose to accept the default selection ofAll Unassigned . I have also de-selected the requirement for SSL but allowed SSL, although in a production environment you should really enforce the use of SSL (albeit many systems still are unable to transfer files using SSL).
Because you will be using the administrator account later in this walk-through, you must ensure that you restrict access to the server and enter the local loopback IP address for your computer by typing127.0.0.1 in the IP Address box. (Note: If you are using IPv6, you should also add the IPv6 localhost binding of::1 .)
Enter the TCP/IP port for the FTP site in the Port box. For this walk-through, choose to accept the default port of 21.
For this example, do not use a host name, so make sure that the Virtual Host box is blank.
Make sure that the Certificates drop-down is set toNot Selected and that the Allow SSL option is selected.
When you have completed these items, clickNext.
On theAuthentication and Authorization Information page of the wizard:
Select Anonymous for the Authentication settings.
For the Authorization settings, chooseAnonymous users from the Allow access to drop-down, and select Read for the Permissions option.
When you have completed these items, clickFinish.
Step 3
Try connecting to the site from the Domain Controller:
Open a command prompt and type the following commands:
FTP
Open 192.168.0.2 (you could also select the dns record pbladm01)
Enter the credentials: Anonymous
Enter a valid email address
I then ran anLS which lists the files in the directory on the ftp server, why not place a file in the directory and re-run this command to see the files.
Summary
You have successfully created a new FTP site using the new FTP service. To recap the items that you completed in this exercise:
You created a new FTP site namedMy New FTP Site , with the site's content root at %SystemDrive%\inetpub\ftproot.
You bound the FTP site to all addresses for the server on port 21, and you chose not to enforce the use of Secure Sockets Layer (SSL) for the FTP site.
You created a default rule for the FTP site to allow anonymous usersRead access to the files.
NOTE : If you set up a ftp ssl connection you must use a third party client that can be an endpoint to the secure connection. To find out more about ssl connection go to Learn IIS
And finally
We recommend repeating these exercises as it will not only help build your confidence in the subject matter but will open your mind to the other capabilities. Do not feel afraid to experiment in our labs!
If you wish to comment on this Practice-Lab please send an email to Support@Practice-IT.co.uk with your feedback.