Re: Access-based Enumeration doesn't work

Thank you very much for your replies.

Sorry for not giving enough info to you.

I have a shared folder called "Kimberley" sitting on the server. At the
moment, everyone can access to it. It has sub-folders as follows

C:\Kimberley that has the following setting configuration
Share Permission
=======
"Everyone(Full Control) and Staff Admin(Full Control)"
Security
=====
Administrator (Full Control), Creator Owner(only Special Permission), Mobile
Users(everything except Full Control), System(Full Control), Users(Read,
Write Execute).

C:\Kimberley\Management (ONLY members of Power Users)
Share Permission
===========
Administrator(Full Control), Domain Power Users(Full Control)
Security
=====
Administrator(Full Control), Domain Admin(same as Administrator), Domain
Power Users(same as Administrator)

After all these, i enabled the Access-based Enumeration for
"C:\Kimberley\Management". The "Kimberley" shared folder does not have
Access-based Enumeration enabled. Next, i tested it by logging on as a user
that's a member of "Mobile users" to a computer and i still saw the folder
"Management" at "C:\Kimberley".

i wonder if you could show me some help here.

Thank you in advance



"David Copeland [MSFT]" wrote:

Can you provide more specifics as to your configuration with respect to
1) share name
2) share permissions
3) path being shared
4) NTFS permissions on the folders

For example:
Share name: Users
Share Perms: Domain Users: Full
Share Path: d:\users
NTFS Perms: d:\users\user1 User: user1 full control, Administrators: full
etc
d:\users\user2 User: user2 full, Administrators full
etc.

http://www.microsoft.com/downloads/details.aspx?FamilyID=04A563D9-78D9-4342-A485-B030AC442084&displaylang=en

http://download.microsoft.com/download/4/9/8/498EEEEF-97B0-450E-8E56-26105D4B092E/Accessbasedenum.doc


--
--


Hope that helps,
David Copeland
Microsoft Small Business Server Support


This posting is provided "AS IS" with no warranties, and confers no rights.


Newsgroups:
SBS v4.x : microsoft.public.backoffice.smallbiz
SBS 2000: microsoft.public.backoffice.smallbiz2000
SBS 2003: microsoft.public.windows.server.sbs

"Charlie Russel - MVP" <charlie@xxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:%236cnzEFQHHA.1248@xxxxxxxxxxxxxxxxxxxxxxx
You claim to have enabled ABE. I'd be interested to hear how you did that.

--
Charlie.
http://msmvps.com/xperts64


"associates" <associates@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote in message
news:1753671F-8E77-49C4-90B1-44CCAA26B47B@xxxxxxxxxxxxxxxx
Hi,

I was wondering if i could get some help here. I was doing a bit of
exercise
on the file sharing permission with a shared folder on the server.

I created two folders, test1 and test2. The "test1" folder is meant for
"domain power user" to access while "test2" is for "mobile users". Anyone
with Administrator right has permission to access both the folders.

Then, i learnt that windows SBS 2003 does provide Access-based
Enumeration
feature that makes visible only those files or folders that the user has
the
rights to access. It says windows will not display files or folders that
the
user does not have rights to access.

I have enabled this ABE on both test1 and test2 but i could still see the
folder "test1" when i log on as a user that has "mobile user" permission.
What's happening here? have i missed out on anything? what should i do in
order to have ABE to work for me?

Thank you in advance





.

Relevant Pages

  • RE: Cant delete files.... constant permission popups!
    ... Administrator from taking Full Control of the entire folder and its contents, ... turn off UAC and try to copy or move folders. ... wants to master the full potential of Vista, such as UAC, that user will have ...
    (microsoft.public.windows.vista.administration_accounts_passwords)
  • RE: Unable to read / move / delete file with admin rights
    ... Go to folders and secure Full Control as ... Then try coping or moving files as administrator with Full Control ... 2 standard users and ...
    (microsoft.public.windows.vista.file_management)
  • Re: remove ability to delete doc
    ... I would like to apply this to folders and if I do, ... >permission set for the folder. ... In the Access Control Settings ... >> Word itself has no function at all for deleting ...
    (microsoft.public.word.docmanagement)
  • Re: Unable to read / move / delete file with admin rights
    ... Administrator from taking Full Control of the entire folder and its contents, ... transfer files or folders from Standard users account to Administrator ... that i get from selecting one file... ...
    (microsoft.public.windows.vista.file_management)
  • Re: No permission to use file.mdb problem
    ... Administrators - Full Control ... In the advanced options both folders have a tick in "Inherit from parent the ... > further up that disallows inheriting from the parent; ... but it's inheriting the wrong permission... ...
    (microsoft.public.access.security)