Add User for FTP Only in Windows Server 2016

reference 1 , reference 2

in Computer Management

1. Create Group "InternetFileAccess"
2. Create User "ftponly"
3. Add ftponly to group "InternetFileAcess" and remove from group "Users"
4. In ftponly Properties -> Remote control tab -> uncheck "Enable remote control" checkbox

in Explorer

1. at directory ‪C:\Users\Public\Downloads Properties -> Security  tab -> add ftponly user -> set permission to Read, Write, Modify, List

in IIS

1. Add FTP Site "ftponly"
2. Physical path is ‪C:\Users\Public\Downloads
3. in FTP Authentication -> Basic Authentication = Enable
4. in FTP Authorization -> Add Allow Rule -> Specified users: ftponly, Premissions : Read, Write
5. in FTP Firewall support set External IP to this Server internal Machine 192.168.1.10 <---- important for fix bug ftp can login but fail to receive directory
6. in FTP SSL Settings set SSL Certificate to "IIS Express Development Certificate", SSL Policy check "Require SSL Connections"
7. in FTP User Isolation check "FTP root directory"