Core FTP

hi, it is a SSH/SFTP the settings are : allow key authentication = on ...key only = off winnt users = off enable AD users = on ignore AD home = on use domain = set use base dir+user = on the service is running as localsystem i even wonder why it is creating a user dir before the user is authenticate...

hi,
if anyone tries to access/hack the server
for each attempt a user folder is created by the server,
although access is denied the folder remains ...

is there somthing to prevent those folders from being created,
besides changing the user context of the service ?

help will be appreciated