Outdated Drivers Are Slowing You Down
One free scan finds every outdated or missing driver and matches the right update for your exact hardware.Free scan · exact hardware matchPC Slower Than It Used to Be?
A free scan shows the junk files, broken settings and background clutter dragging Windows down - then fixes them in one click.Free scan · Windows 10 & 11To change where an SFTP session opens, change the account’s home directory. If the user must be confined to that location, add a chroot as well: ChrootDirectory changes the visible filesystem root, and sshd then starts in the user’s home directory inside that root. For SFTP-only access, pair the jail with ForceCommand internal-sftp.
Need a server to try this on? Antihost offers Linux VPS plans with NVMe storage, full root access and a 14-day free trial.
On Windows OpenSSH, Microsoft also documents the -d start/upload-directory option on the sftp-server subsystem. The correct method depends on whether you need a simple landing-directory change, a per-user rule, or a filesystem jail.
As an Amazon Associate I earn from qualifying purchases.
Choose the control that matches your goal
“Default directory” can mean two different things. The operating-system home directory determines the normal post-login working directory. A chroot is an isolation boundary: it makes a selected directory appear to be / (or the equivalent root) for that session. These settings can be combined, but they do different jobs.
| Goal | Setting | What the user sees | Typical scope |
|---|---|---|---|
| Open in another folder, without isolation | Account home directory | The normal host filesystem, starting at the new home path | One account, using the platform’s account-management tool |
| Confine an account to a directory | ChrootDirectory |
Only the chroot tree; the chroot becomes the session’s filesystem root | Users or groups selected by a Match block |
| Provide SFTP but no shell or other SSH features | ForceCommand internal-sftp |
An SFTP session handled inside sshd |
Usually paired with a per-user or per-group chroot |
| Set a subsystem-wide start/upload directory on Windows | sftp-server.exe -d <directory> |
The directory selected by the SFTP server | The configured Subsystem; use per-user home/chroot settings when users need different locations |
OpenSSH’s manual describes the sequence precisely: “After the chroot, sshd changes the working directory to the user’s home directory.” In other words, if the account home is /upload and the chroot is /srv/sftp/alice, the session starts at /srv/sftp/alice/upload on the host, while the SFTP client sees that location as /upload.
#1 Best Overall
- BLUE LIGHT BLOCKING GLASSES: Our blue light glasses for women boast UV400 protection, blocking harmful blue rays from computer screens. With these bluelight glasses women, you can enjoy gaming, reading, or watching TV with no worries of eye strain.
- EYE RELIEF: Our blue light glasses are engineered to reduce blurry vision or strain caused by prolonged screen time. These womens blue light glasses aid in better sleep by preventing blue light from disrupting your natural sleep cycle, helping you fall asleep faster and enjoy a more restful night's sleep, making them the perfect christmas present.
- COMFORTABLE: Crafted from durable material, our trendy blue light glasses for woman or blue light glasses men ensure long-lasting comfort. The high-transmittance lenses accessories, gamer gifts for men, help keep your eyes relaxed. Perfect stocking stuffers, gifts for gamers men, christmas gifts for men, halloween costumes.
- LIGHTWEIGHT: These clear blue light glasses feature a lightweight frame, meaning they’ll stay comfy for long-term wear. Perfect as blue blockers glasses for women or mens blue light glasses, these non-prescription fake glasses for men can be worn throughout the day. The blue light blocking glasses women feature polycarbonate HD lenses, which are anti-reflective and restore true color.
- WORRY-FREE PURCHASE: If you experience any issues, our support team is ready to assist you quickly. These are the perfect costume glasses for cosplay dressing up.
Before editing: identify the paths and scope
Write down three paths before changing configuration:
- Host chroot path: the directory that will become the user’s visible root, such as
/srv/sftp/aliceon Linux. - Path inside the jail: the home path that
sshdwill use after chroot, such as/upload. It must be expressed from the jailed root, not as the host’s absolute path. - Writable data directory: a child directory where the SFTP account can create or modify files.
Decide whether the rule is for one user or a group. A Match User alice block limits the change to Alice. A Match Group sftpusers block applies it to every account in that group. Keep user-specific rules below the global settings in sshd_config, and make sure the block ends or is followed by another appropriate Match context.
What’s actually slowing this PC down?
Pick the symptom - the matching free tool is one click away.
Linux OpenSSH: change the home directory without a jail
If the account should still be able to use the normal host filesystem, do not add ChrootDirectory. Change the account’s operating-system home directory with the user-management utility provided by your distribution. The exact command and options differ between Linux distributions, so use that platform’s manual rather than copying a distribution-specific command blindly.
Rank #2
- WINDEX GAMING WIPES: effortlessly clean all your gaming gear and gaming electronics in one easy step with our new Windex Gaming Wipes
- AMMONIA FREE: our ammonia-free formula is safe to use on all of your favorite gaming equipment like consoles, headsets, controllers, screens, keyboards, and more
- PRE-MOISTENED WIPES: each wipe instantly removes dust, dirt, and stubborn smudges and fingerprints leaving a streak-free shine
- ANTI-STATIC: great for cleaning and wiping down your gaming gear and electronics leaving behind no visible residue
- COMPACT RESEALABLE PACKAGE: store your pack of Windex Gaming Wipes anywhere in your home for whenever a quick and easy wipedown is needed
- Choose an existing directory, or create it with the ownership and permissions required by the account.
- Use the distribution’s account tool to set that directory as the user’s home path. The account database should report the new value afterward.
- Confirm the result with your platform’s account lookup utility (for example, inspect the account entry with
getent passwd aliceon systems that provide it). - Connect with an SFTP client and run
pwd. The reported starting directory should correspond to the new home path.
This approach changes the landing location but does not prevent the account from navigating elsewhere. If the user must not see files outside a designated tree, use a chroot instead.
Linux OpenSSH: create a per-user SFTP jail
A common user-specific configuration is:
Match User alice
ChrootDirectory /srv/sftp/%u
ForceCommand internal-sftp
X11Forwarding no
AllowTcpForwarding no%u expands to the login name, so Alice’s chroot becomes /srv/sftp/alice. The final two lines disable unrelated SSH features for this account. They are not what creates the directory change; they reduce the chance that an SFTP-only account can use forwarding or X11.
1. Build a compliant chroot tree
Create the jail’s parent and user directory with the system administrator account. Every component of the chroot path must be owned by root and must not be writable by the group or by other users. A typical layout is:
Rank #3
- Ergonomic & Adjustable Design: Fight "text neck" and improve your posture. Designed for comfort, it offers an adjustable height (7.1in-8.5in) (1.4in adjustable range) and angle (5°-85°) Please note: cell phone stand is only 9 inches tall—the length of a standard pencil
- Without blocking subtitles Perfect for office desk Tiktok Face Time Zoom video—this is the ultimate kitchen desk essential for phones! Perfect viewing experience while reducing neck back strain, A must-have for gamers streamers desk, and anyone who values both style and support!
- Sleek & Stable Design fits Otterbox Case: Say goodbye to bent cables, tangles, and tip-overs! LISEN’s stylish adjustable desk phone holder features a built-in charging hole and smart cable management, keeping your phone secure and your workspace clutter-free cool gadgets for men
- ANTI-SLIP DESIGN free hands: The under 10.00 items easy gadgets back and the bottom of this kitchen essentials for women are fully covered by anti-skid silicone, which LISEN stand up desk decor can provide maximum protection device from any scratches and slides
- Your Perfect Viewing Companion:If your product arrives damaged or breaks within 365 days, reach out to LISEN for a quick and hassle-free solution. Struggling with assembly, like tightening the screw? We’ve got your back! Your experience matters to us. (Product including: phone Holder stand*1, screw*1, hexagon screwdriver*1, specification*1)
/srv/sftp/ root:root, not group/other-writable
/srv/sftp/alice/ root:root, not group/other-writable
/srv/sftp/alice/upload/ writable by aliceThe writable directory must be below the root-owned chroot. Do not make /srv/sftp/alice itself writable by Alice; OpenSSH will reject an unsafe jail.
2. Set the account home path inside the jail
Set Alice’s account home directory to /upload (or another directory that exists inside the jail). Do not set it to /srv/sftp/alice/upload for this configuration. Once the chroot is applied, that host path is no longer visible as an absolute path; /upload is the correct path from the new filesystem root.
3. Confirm the SFTP subsystem
The global Subsystem sftp line must refer either to an available external sftp-server binary or to the in-process implementation:
Rank #4
- Easy Installation: Our gaming lights have been designed to enhance your entertainment experience. Simply position the led light bar next to your TV or game console to create a game room environment with ease. They come with USB power and a 60 inch cord for direct mounting and mobility
- Audio Syncing & Extensive Mode: The built-in high-sensitivity music sensor allows you to sync the TV led lights to your favorite music. Lights react and move to the beat of music, film and game audio, creating an incredible immersive sound and light experience – and all without the need for an additional hub. You can choose from 64+ patterns, including strobe, illusion, jump, energy, gradient, running, chasing, fluttering mode etc. Each mode can be applied to different scenes
- 64+ Chasing IC+RGB & W Effect: The independent control design of IC+RGB and white all-in-one multifunctional rgbw led bar lights monitor backlight allows you to easily switch the led lights for desk between IC+RGB and white to enjoy a variety of lighting effects, you can choose white lighting mode with high brightness for better illumination when working, etc. Choose IC+RGB lighting mode when you need to create an entertaining atmosphere for the light show, 16 million colours of Color changing rgb light bar let you dance to the beat and create a dynamic party atmosphere
- Dynamic and Dimmable Lights: 1%-full brightness free brightness adjustment gives you the flexibility to adjust dimmable led light bar for room decorations or a variety of occasions
- USB Powered: USB light bars for room can be powered by powernank, usb charger, TV, Monitor, laptop PC mainframe, making behind TV led lighting bar easy to install in any location.TV led lights are powered by the TV usb interface / PC mainframe, can be turned on/off synchronously with TV / PC
Subsystem sftp internal-sftpDebian’s sshd_config(5) documentation states that “the name internal-sftp implements an in-process SFTP server.” Using it avoids a separate server binary inside the jail, which is why it is the usual companion to ForceCommand internal-sftp.
Do these 3 things before closing this tab:
1Fix the driver behind crashes, sound loss and screen glitches2Repair Windows errors before they cause bigger problems3Scan for outdated or missing drivers - takes under a minute4. Validate and restart safely
- Save a backup of
sshd_configbefore editing. - Validate syntax as an administrator:
sudo sshd -t. Microsoft’s OpenSSH guidance gives the same rule for Windows: validate every configuration change withsshd -t. - If validation reports an error, fix it before restarting. A syntactically valid file can still fail at login if ownership, permissions, or paths are wrong.
- Keep an existing administrative SSH session open while restarting the service, so you have a recovery path if the new rule prevents login.
- Restart the SSH service using the service manager and name used by your distribution.
5. Test the result
Log in as Alice with an SFTP client and run pwd and ls. The initial directory should be /upload. Attempting to move above the jail should not reveal the host’s directories. Create a test file in /upload to verify that the writable child directory has the intended ownership.
Windows OpenSSH: set a start directory
Microsoft’s OpenSSH troubleshooting guidance documents the -d switch on the SFTP subsystem to set an upload directory. A configuration pattern is:
Best Value
- Compatible with Wide Screens - To ensure compatibility with the dual monitor mount, your each monitor must meet three conditions at the same time: First, computer screens size range: 13 to 32 inches. Second, screen weight range: 4.4 to 19.8 lbs. Third, the back of the monitor screen must have VESA mounting holes with a pitch of 75x75mm or 100x100mm.
- Regarding the compatibility with desks - Your desk must meet three conditions at the same time: First, desk material: Only wooden desks are recommended, plastic or glass desks cannot be used. Second, desk thickness range: 0.59" - 3.54". Third, the bottom of the desk should not have any cross beams or panels, as this will interfere with installation. We recommend carefully checking that your desk and monitors meets all above conditions before purchasing.
- Dual C-Clamp Hold - Worried your dual monitors might wobble or slip? Our upgraded base uses a larger platform plus a dual C-clamp structure to lock the dual monitor arm firmly to your desk. Each arm safely keeps your screens steady while you type, click and game—no shaking, no sliding, just a clean and secure setup you can trust every day. It also provides Grommet Mounting installation choice, both options ensure stable and secure fixation for your 0.59" - 3.54" desk.
- Full-Motion Adjustment For Comfortable View - Pull the screen closer when you’re deep in a spreadsheet, push it back to watch videos, or rotate to portrait for coding — moving everything smoothly with just one hand. The monitor stand offers +85°/-50° tilt, ±90° swivel and 360° rotation. Raise your monitor up to 15.75″ to support a healthy sitting posture. Whether you’re working from home, gaming through the night, or switching between video calls and documents, getting the screens to your natural line of sight helps relieve neck, shoulder and back strain so you can stay focused longer with less fatigue.
- Keep Your Desk Organized: By lifting both screens off the desktop, this dual monitor stand opens up valuable space for your keyboard, notebook, docking station or a simple, clutter-free work area. Built-in cable management guides wires along the arms, keeping cords out of sight and out of the way. Enjoy a tidy, modern workstation that looks as good as it feels to use.
Subsystem sftp sftp-server.exe -d C:/SFTP/uploadUse a local Windows path that exists and is accessible to the OpenSSH service. Forward slashes avoid ambiguity in the configuration file; use the path form accepted by the OpenSSH build installed on the server. Because Subsystem is a global definition, this setting is generally shared by users who use that subsystem. If different users need different starting directories, use account-specific home paths or Match-scoped chroots rather than assuming one global -d value can serve all accounts.
Windows isolation with a chroot
When isolation is required, use a Match User or Match Group block with ChrootDirectory and ForceCommand internal-sftp. Keep the chroot on a local path. Microsoft’s guidance also requires correct ownership and NTFS access-control settings:
Free tools Windows power users keep installed
One-click scans. No signup required.
- The chroot directory and its parents should be owned by
SYSTEMorAdministrators, as appropriate for the installation. - Do not grant the SFTP user write access to the chroot root itself.
- Create a child directory inside the chroot and grant the user the NTFS permissions needed for uploads and edits.
- Check that the path is local rather than a network or mapped-drive location; service accounts may not see mapped drives.
Set the user’s home path to the directory as it is visible inside the jail. As on Linux, the chroot becomes the new root, so a host path such as C:SFTPaliceupload is not automatically the correct in-jail home value.
Validate and restart the Windows service
- Open an elevated PowerShell or Command Prompt.
- Run
sshd -tfrom the OpenSSH installation path, or use the full path if it is not onPATH. - Correct every reported error before restarting.
- Restart the service named OpenSSH SSH Server in Services, or use the service manager command for the installed service (commonly
Restart-Service sshdin elevated PowerShell). - Test with a fresh SFTP connection and inspect the OpenSSH event or service logs if the connection fails.
How the paths are interpreted
Path confusion is the most common conceptual error. Suppose the host contains:
/srv/sftp/alice/uploadand the configuration contains:
ChrootDirectory /srv/sftp/aliceAfter authentication, that host directory becomes / to Alice. The writable child is therefore /upload, and the account home should be set to /upload. A client’s pwd output is relative to the jail, not to the host’s original root.
Diagnose the common failures
| Symptom | Likely cause | Checks and correction |
|---|---|---|
| The user lands in the wrong directory | The account home path is unchanged, is wrong for the chroot, or a subsystem -d option overrides the expected start location. |
Inspect the account’s home value, interpret it from inside the chroot, and review the active Subsystem sftp line. |
| Login fails with “Bad ownership or modes” | A Linux chroot component is writable by the account, its group, or other users. | Check every parent and the chroot itself. Make them root-owned and not group/other-writable; leave write permission only on a child data directory. |
| Windows login is refused or the jail is ignored | The chroot is on an unsuitable path or NTFS ownership/ACLs do not satisfy OpenSSH. | Use a local path, verify SYSTEM/Administrators ownership, and grant the user access only to a writable child directory. |
| The user can browse outside the intended tree | No chroot is configured, the Match block does not match the account, or the session is not forced into SFTP. |
Check the user/group selector, add ChrootDirectory, and use ForceCommand internal-sftp for an SFTP-only account. |
| The configuration change appears to do nothing | The file was edited in the wrong location, the service was not restarted, or a later/global rule wins. | Run sshd -t, confirm the service reads the edited file, inspect logs, and test a new connection rather than an existing session. |
| The user can enter the directory but cannot upload | The chroot root is correctly protected, but no child directory is writable by the SFTP account. | Create a writable child such as upload and grant only the required ownership or ACL permissions there. |
Operational and security checks
- Test with a new session: an already-open SFTP connection keeps its existing working directory and permissions.
- Keep an administrator session open: this protects you from locking yourself out during a restart.
- Use the narrowest match: select one user when only one account needs the rule; use a group when the policy is intentionally shared.
- Separate jail protection from write access: the chroot root should be protected, while a specific child directory receives write permission.
- Disable unneeded features: for SFTP-only accounts,
ForceCommand internal-sftpprevents a normal shell, and disabling X11 and TCP forwarding closes unrelated SSH channels. - Read the logs after a failed test: ownership, ACL, path, and match-context errors are usually recorded even when the client reports only a generic failure.
Which method should you use?
Use only a changed home directory when the account is trusted to navigate the host and you simply want a different starting location. Use a chroot plus an in-process SFTP command when the account should be limited to one tree. On Windows, use the documented -d subsystem option for a shared start/upload directory, but choose per-account home or chroot settings when users need separate destinations. In every case, validate with sshd -t before restarting and verify both the initial directory and the user’s actual ability to read and write files.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
