FTP lets you move files between your computer and the server. On Windows Server, FTP is a role service of IIS (Internet Information Services).
Step 1: Install IIS and the FTP role
- Click Start, type
Server Managerand open it. - Click Manage > Add Roles and Features.
- In the wizard:
- Choose Role-based or feature-based installation.
- On Server Roles tick Web Server (IIS). If it is already ticked, IIS is installed.
- Make sure the IIS Management Console is selected.
- Under Web Server Role (IIS) > Role Services tick FTP Server.
- You may untick the other Web Server parts if you do not host websites. - Go to the end and click Install. Wait until it finishes.
Step 2: Create the FTP site
- Open Internet Information Services (IIS) Manager from Administrative Tools.
- Click your server name in the left column.
- Right-click Sites and choose Add FTP Site.
- Site Information. Give the site a name, such as
FTP Site, and choose the folder on the server that users will see. - Binding and SSL. Keep port 21. Choose Require SSL if you have a certificate, or No SSL for a test (not safe for real use).
- Authentication and Authorization. Select Basic and deselect Anonymous. Choose which users may connect, and give Read and Write permission.
- Click Finish.
Step 3: Open the firewall
Allow FTP in Windows Firewall:
- Open Windows Defender Firewall > Allow an app.
- Allow FTP Server.
If you use passive mode, also set a port range in FTP Firewall Support in IIS and open those ports. On a cloud server, also open them in the provider firewall.
Step 4: Connect
Use an FTP client such as FileZilla:
- Host: the server IP address.
- User: a Windows user that you allowed, such as
Administrator. - Password: that user's password.
- Port: 21.
Warning: Plain FTP sends passwords without encryption. Use FTPS (FTP over SSL) whenever you can, and do not use the Administrator account for daily file transfers. Create a dedicated user instead.
Quick recap
- Install the FTP Server role service under IIS.
- Add an FTP site with Basic authentication.
- Open the firewall and connect with the server IP.