Microsoft KB Archive/269097

{|
 * width="100%"|

PRB: Event ID 100 Occurs When Domain User Attempts to FTP to Windows 2000 Domain Controller

 * }

Q269097

-

The information in this article applies to:


 * Microsoft Windows 2000 Server

-

SYMPTOMS
Domain users cannot use the File Transfer Protocol (FTP) to transfer files to or from a Windows 2000-based domain controller that has Internet Information Services (IIS) installed. When a domain user attempts to use the FTP utility in this manner, the command does not work and the following error message appears in Event Viewer:

Event ID:100

Error Message: Access denied

Source: MSFTPSV

Members of the Domain Admins group can successfully FTP to the Windows 2000-based IIS server.

CAUSE
The default group policy settings do not permit this action. This behavior is by design.

RESOLUTION
To work around this behavior, modify the Group Policy Object for the domain controller.

MORE INFORMATION

 * 1) Click Start on the taskbar, point to Programs, point to Administrative Tools, and then click Domain Controller Security Policy.
 * 2) In the left pane of the Domain Controller Security Policy window, click Security Settings, click Local Policies, and then click User Rights Assignment.
 * 3) In the Policy column, right-click Log on Locally, and then click Security.
 * 4) Click Add, and then click Browse. Click the group you want to add, click Add, and then click OK.
 * 5) Click OK in the Add user or group and Security Policy Setting dialog boxes to close them, and then close the Domain Controller Security Policy window.
 * 6) To propagate the new policy, type the following command at a command prompt, and then press ENTER:

secedit /refreshpolicy machine_policy /enforce

Additional query words:

Keywords :

Issue type : kbprb

Technology : kbwin2000Serv kbwin2000ServSearch kbwin2000Search