Q:

IIS 7.5 FTP IIS Manager Users Login Fail (530)

IIS 7.5 FTP IIS Manager Users Login Fail (530)
I'm trying to set up a FTP site on IIS 7.5 that allows IIS Manager Users to login. I'm following this guide: http://learn.iis.net/page.aspx/321/configure-ftp-with-iis-7-manager-authentication/.
After set up, I cannot login to the FTP using an IIS Manager User account. The client error I got was 
530 User cannot log in.
Win32 error:   Unspecified error.
Error details: An error occured during the authentication process.
I tried both with or without a virtual host. A Windows account login fine.
The only strange thing I noticed was that when setting up Read permission for Network Service, there was an access denied error when setting up permission for "%SystemDrive%\Windows\System32\inetsrv\config\schema".
Any thoughts? Thanks!

A:

Turned out I didn't install FTP Extensibility. There were two sub-items under FTP Service in IIS Role Features. I only selected the first one and didn't enable FTP Extensibility, which IIS Manager User and ASP.NET Membership rely on.

A:

I tried installing the FTP Extensibility role service as suggested by Jim but to no avail. In fact, I suspect that the "FTP Publishing Service" shown in the list of available roles is the old IIS6 service rather than the newer IIS7/FTP7 version. The description of the "FTP Management Console" subitem has a description containing the line, "IIS7 users IIS6 management console for FTP server management", which rang a bell - I think I remember installing this by accident before and only realising when the IIS6 suddenly appeared in my Programs list.
What did do the trick for me was simply setting permissions on a few files and directories. I got the basic information from http://www.trainsignal.com/blog/windows-server-2008-ftp-user-authentication, but the commands were outdated (they used CACLS which is now deprecated in favour of ICACLS) and the syntax is a little different, so I had to adapt them slightly. You can do the same job in Explorer but I did it this way (at an Adminstrator command prompt):
ICACLS "%SystemDrive%\Windows\System32\inetsrv\config" /grant "Network Service":(R)

ICACLS "%SystemDrive%\Windows\System32\inetsrv\config\administration.config" /grant "Network Service":(R)

ICACLS "%SystemDrive%\Windows\System32\inetsrv\config\redirection.config" /grant "Network Service":(R)

and then:
ICACLS "%SystemDrive%\inetpub\ftproot" /grant "Network Service":(M)

I then restarted IIS and the FTP service on my website and was able to log in using IIS Manager Permissions as expected.

