[This is preliminary documentation and subject to change]

FTP Service Registry Entries

In addition to Service-Specific Registry Entries, the FTP service maintains the following parameters.

AnnotateDirectories

Registry Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet \Services\MSFTPSVC\Parameters\

Data Type: REG_DWORD

Default value: 0 (disabled)

Range: 0,1

The FTP service supports annotating a directory with custom messages. The annotation text is stored in a file named ~ftpsvc~.ckm in the directory to be annotated. If this file~ftpsvc~.ckm exists in the target directory of a Change Directory (CWD) FTP operation, the FTP service responds with the contents of this file for the operation. This provides a way for administrators to add custom messages for directories under consideration. By default the service is configured to not send annotation text. If you choose to add a custom message, you should also create the annotation file. Also, you should make the annotation file a hidden file so that the file does not appear on a directory listing.

EnablePortAttack

Registry Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet \Services\MSFTPSVC\Parameters\

Data Type: REG_DWORD

Default value: 0 (disabled)

Range: 0,1

This parameter is setdisabled by default to prevent a security problem in the FTP protocol specification. Because EnablePortAttack is disabled by default, you should enable, this flag iIf you want users to connect by using other ports as specified in the FTP RFC.The FTP service specification allows passive connections to be established based on the port address given by the client. This can allow malicious users to execute destructive commands in the FTP service. The problem occurs when the FTP service connects using a port other than FTP Data port (20) and that port number is less than IP_PORT_RESERVED (1024);.EnablePortAttack controls if such an attack should be allowed. By default, the service does not make any connections to port numbers lower than IP_PORT_RESERVED (other than 20).

LowercaseFiles

Registry Path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet \Services\MSFTPSVC\Parameters\

Data Type: REG_DWORD

Default value: 0 (disabled)

Range: 0,1

The FTP service uses uppercaseuses the native caseis not case sensitive for file names (how the file names are stored in file system). However, iIn order for exact comparisons with case-sensitive file systems to work, you may need to ensure that properthe exact file names are usedcompared. Administrators can add this valueLowercaseFilesto the registry to ensure that the FTP service also uses lowercase for such comparisons.