FTP Error 530 User cannot login

Question

I am trying to FTP to a new FTP site I setup with IIS 7.0 for the Windows Server Web (64-bit) edition. But I get the above error when I try to login to this site. But I can login to my other FTP sites.

Also, when I select this website from IIS Manager, the FTP section does not display in the middle section although it does display in Action panel. And I cannot successfully login to this FTP site either.

I have checked and I have Log on locally selected. I do not have allow only anonymous connections. I have Access this computer from the network selected.

I restarted my IIS and FTP services also.

The one different thing I noticed about this website in IIS different from the other site that has FTP working is that this one there are 3 virtual directories beneath the site. And that when I click on any one of these 3, then the FTP strip does appear in the center pane. Make sense?

How can I debug cause of this error? Any SW tools I can use?

Answer 1

There seem to be many different possible causes. In my case, I was unable to login with the plain "username" with the same error as mentioned.

It was solved when I logged in with ".\username" instead.

For some reason the FTP client was trying to login with a domain account, while I just wanted to login with a local computer account.

Hope this helps someone.

Answer 2

In my case I had to remove domain from user.

So, your user should be like username, not like domain\username.

Hope it helps to somebody.

Answer 3

I would recommend checking FTP logs first. The status code will give you more information about the issue. Here is the explanation of the status codes: The FTP status codes in IIS 7.0 and later versions

I had this issue because my IIS didn't support passive mode. After entering data in FTP Firewall Support module, the issue was solved.

More scenarios from this post 530 User cannot log in, home directory inaccessible

Authorization rules. Make sure to have an Authorization rule that allows the user or anonymous access. Check “IIS > FTP site > FTP Authorization Rules” page to allow or deny access for certain or all users.

NTFS permissions. The FTP users (local or domain users) should have permissions on the physical folder. Right click the folder and go to Properties. In the Security tab, make sure the user has required permissions. You can ignore Shared tab. It is not used for FTP access.

Locked account. If you local or domain account is locked or expired, you may end up seeing “User cannot log in” error. Check local user properties or Active Directory user settings to make sure the user account is active.

Other permission issues. The user account may not have “Log on locally” or “Allow only anonymous connections security” rights.

Answer 4

For me, I've configured the IIS as per usual procedure properly. The anonymous authentication was working but specific user are not.

because, the user accounts were created in IIS. Actually it was also supposed to be created Windows local accounts.

Then it worked.

Answer 5

You can check the reference account you are using to log in. Mine happened to be locked out causing the 530 error.

Answer 6

in my situation, I was missing Role Service FTP extensibility, which is actually allows IIS Manager Auth. This is pretty tricky, as you could allow IIS Manager auth, but still it would not work until you have not installed FTP Extensibility