On my Windows 2008 web server I've also setup an FTP site with user isolation within user folders and the NTFS permissions are set so that users only have read access to their own folder.
Though I am by no means a security expert I am attempting to be security conscious so I would like to know if there are any other steps I can take to harden the FTP service against attack? I've read that FTP is not very secure so I want to do everything I can to combat that.
The data available to the users on the FTP site is not sensitive so encryption is not a requirement. Mainly I just want to make every effort to keep malicious users out of any other parts of the web server.