Re: Access Based Enumeration enabled

Hi, Donna.
I think that ABE property has impact only at visibility the file and folders
which situated UNDER the shared folder level.
Please, read the
http://download.microsoft.com/download/4/9/8/498EEEEF-97B0-450E-8E56-26105D4B092E/Accessbasedenum.doc

Regards.


"Donna Harrison" wrote:

ok..I have also changed the *share* permission to domain admins.. All users
can still see this share. It is not hidden..

A previous response from Mathieu stated ABE is for folder and files only..
not shares.. If this is true.. why do you need it?

I can accomplished the same thing by allowing specific groups access to
folders under a share name. All share names are visible to all users, but
access is denied.

I was hoping that ABE would make all shares invisible except for those the
user has permission.

Microsoft states " ABE filters shared folders visible to a user based on
that individual user’s access rights, preventing the display of folders or
other shared resources that the user does not have rights to access. "

Donna

"Meinolf Weber (Myweb)" wrote:

Hello Donna,

You wrote share permission is set to domain users, so ofcourse the users
will see the share and because they do not have more rights, they get access
denied.

Best regards

Meinolf Weber (Myweb)
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

Hi.. I have a I386 Windows 2003 R2 SP2 with ABE enabled for all
shares, (and I have checked the properties of each share as well)

The security permissions to the file are currently set to domain
admins only, the share permission is domain users.. but ordinary
domain users can still see the share.. (with access denied)

I thought the shares were not suppose to be invisible to those without
access?

Any troubleshooting ideas would be appreciated

Donna




.

Relevant Pages

  • Re: can this be done easily
    ... Apparently the folders to which the account does have access ... access one shared folder in one of the member server within the domain ... I removed this user from the domain users group so ...
    (microsoft.public.inetserver.iis.security)
  • RE: Best way to hide folders in shares
    ... Access Based Enumeration. ... This will allow you to display only folders ... You can download ABE as well as find the documentation on the MS site. ...
    (microsoft.public.windows.server.general)
  • Re: Access-based Enumeration doesnt work
    ... You claim to have enabled ABE. ... I created two folders, test1 and test2. ...
    (microsoft.public.windows.server.sbs)
  • Re: Access-based Enumeration not working
    ... 2- ABE does not apply to users who can log on interactively to the server, ... regardless of whether they are administrators or not. ... the users should only see the shared folders ...
    (microsoft.public.windows.server.active_directory)
  • Re: ABE Help
    ... Currnently I have things set the only things that can be seen are folders and NO files except the files in their own folders. ... Am I changeing the SECURITY rights or the share permissions or both to use ABE? ... Set the share permissions to be something reasonably loose, ... make sure that the account you are using to test with is NOT an administrator account. ...
    (microsoft.public.windows.server.general)
Loading