Group Policies (WXP-Pro)

[courtjester]

I want to make a user account that can logon to my computer through the network and most importantly my ftp site (Which is just ran by IIS) but not be able to log on locally. When I make the user account "netuser" which is in the group "Users" it can login via FTP. But when I remove "Users" from the "Log on Locally" option in the group polocies netuser can't logon. Then I restored Users to "Log on Locally" and added Netuser to "Deny Local Logon". After that I still have the same problem with the FTP login. Is there a way for this account to log in through FTP but not locally.

[motoflop]

I'm not sure about if this works at all, but have you tried to give "logon as batch job" to that ftp user/group? It depends how IIS logs ftp users on. If IIS uses batch logon, it should work. Also check from IIS settings if there are any ways to control logon process for ftp users.