Hello!
I have a web-server on Windows2003. There are a lot of ftp virtual directories and web-sites. When the user
access his ftp virtual directory by FTP I get warning in System log. But user can access and modify files in his ftp virtual directory!
Can anybody explain me this errors?

Source: MSFTPSVC
EvenID: 100
The server was unable to logon the Windows NT account 'user's account' due to the following error: Logon failure: unknown user name or bad password. The data is the error code.

Also in Security Log I can see two failure audits.

Source: Security
EventId: 680
Logon attempt by: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Logon account: user's account
Source Workstation: server name
Error Code: 0xC000006A

And second
Source: Security
EventID: 529
Logon Failure:
Reason: Unknown user name or bad password
User Name: user's account
Domain: server name
Logon Type: 8
Logon Process: IIS
Authentication Package: MICROSOFT_AUTHENTICATION_PACKAGE_V1_0
Workstation Name: server name
Caller User Name: server name$
Caller Domain: domain name
Caller Logon ID: (0x0,0x3E7)
Caller Process ID: 1880
Transited Services: -
Source Network Address: -
Source Port: -