How to configure IIS to use specific ports for Passive FTP

If you want to put your servers behind a firewall, and limit what ports you can use for FTP, here is how to do it.

Difficulty: Easy

Instructions

1. Login to the machine using remote desktop.

2. Go to the Inetpub\AdminScripts directory. This is typically on the same drive you installed windows, so c:\Inetpub\AdminScripts

3. Run the command
   adsutil.vbs set /MSFTPSVC/PassivePortRange "xxxx-yyyy"
   
   And replace xxxx with the starting port and yyyy with the ending port range.

Tips & Warnings

• Do not remove the quotes, and do not add a space between the numbers and the dash
• Do not use anything less then 5500 for the starting port as it will cause IIS FTP Publishing service to fail to start due to the error "A dynamic link library (DLL) initialization routine failed. " - Event ID 7023