IIS6 with FTP for remote webmaster

I read the previous thread on a similar question, but I had a couple more
questions. My site needs to be maintained by a remote user who uses
dreamweaver and other programs and the new site will be completely new. He
wants to use an ftp program to transfer files, but I have read this is very
unsecure. I am also running exchange on this server so it needs to stay
secure. Would I setup an ftp site using the home directory of the website?
What is the proper way to do this? Is there a better way to publish files
without using one of the web designer programs?

Thanks

TJ

Re: IIS6 with FTP for remote webmaster

"TJ" wrote in message
news:7FC5D682-0F0D-4F76-9B09-0B8A9F635326@microsoft.com...
>I read the previous thread on a similar question, but I had a couple more
> questions. My site needs to be maintained by a remote user who uses
> dreamweaver and other programs and the new site will be completely new.
> He
> wants to use an ftp program to transfer files, but I have read this is
> very
> unsecure. '

That depends on how you set it up. You can restrict what IP addresses can
connect (with the firewall or IIS) you can set your directory structure and
users to be somewhat compartamentalized to help mitigate damage should an
unauthorized user get in.

I am also running exchange on this server so it needs to stay
> secure.

On the same server? I would not advise running a web site and Exchange on
the same server period, ever. You can sort of get away with it with SBS but
over the long run you either run into restrictions to what you can do with
the web site, or end up adding risks to your exchange server that are best
avoided. One of the key steps to running a safe FTP server is RENAME the
original "administrator" accounts. And if you are installing on an existing
Exchange server that's impossible. So already you've made a compromise in
security if you run both.

IIS will run a single web site on a very low end cruddy server, you might
want to task an old box to that and run just the site and FTP on it.

Would I setup an ftp site using the home directory of the website?
> What is the proper way to do this? Is there a better way to publish files
> without using one of the web designer programs?
>

There are step by step instructions all over the place (and linked from
various users blogs and such here) on the web. Go find one.

Come back with specific questions if you get stuck. You need to learn all
the basics anyway, it's not good to dive in with X, Y, Z steps to set up
without a bit of background.