Access Based Enumeration enabled

[Donna Harrison]

Hi.. I have a I386 Windows 2003 R2 SP2 with ABE enabled for all shares, (and
I have checked the properties of each share as well)

The security permissions to the file are currently set to domain admins
only, the share permission is domain users.. but ordinary domain users can
still see the share.. (with access denied)

I thought the shares were not suppose to be invisible to those without access?

Any troubleshooting ideas would be appreciated

Donna

 

[Mathieu CHATEAU]

Hello,

it only acts on files/folders access, not on the share themselves

--
Cordialement,
Mathieu CHATEAU
http://lordoftheping.blogspot.com


"Donna Harrison" <DonnaHarrison@discussions.microsoft.com> wrote in message
news:27AC0EB5-D762-4788-83BB-6F7EA653E315@microsoft.com...
> Hi.. I have a I386 Windows 2003 R2 SP2 with ABE enabled for all shares,
> (and
> I have checked the properties of each share as well)
>
> The security permissions to the file are currently set to domain admins
> only, the share permission is domain users.. but ordinary domain users
> can
> still see the share.. (with access denied)
>
> I thought the shares were not suppose to be invisible to those without
> access?
>
> Any troubleshooting ideas would be appreciated
>
> Donna

 

[Meinolf Weber (Myweb)]

Hello Donna,

You wrote share permission is set to domain users, so ofcourse the users
will see the share and because they do not have more rights, they get access
denied.

Best regards

Meinolf Weber (Myweb)
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.

> Hi.. I have a I386 Windows 2003 R2 SP2 with ABE enabled for all
> shares, (and I have checked the properties of each share as well)
>
> The security permissions to the file are currently set to domain
> admins only, the share permission is domain users.. but ordinary
> domain users can still see the share.. (with access denied)
>
> I thought the shares were not suppose to be invisible to those without
> access?
>
> Any troubleshooting ideas would be appreciated
>
> Donna
>

 

[Donna Harrison]

ok..I have also changed the *share* permission to domain admins.. All users
can still see this share. It is not hidden..

A previous response from Mathieu stated ABE is for folder and files only..
not shares.. If this is true.. why do you need it?

I can accomplished the same thing by allowing specific groups access to
folders under a share name. All share names are visible to all users, but
access is denied.

I was hoping that ABE would make all shares invisible except for those the
user has permission.

Microsoft states " ABE filters shared folders visible to a user based on
that individual user’s access rights, preventing the display of folders or
other shared resources that the user does not have rights to access. "

Donna

"Meinolf Weber (Myweb)" wrote:

> Hello Donna,
>
> You wrote share permission is set to domain users, so ofcourse the users
> will see the share and because they do not have more rights, they get access
> denied.
>
> Best regards
>
> Meinolf Weber (Myweb)
> Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> no rights.
>
> > Hi.. I have a I386 Windows 2003 R2 SP2 with ABE enabled for all
> > shares, (and I have checked the properties of each share as well)
> >
> > The security permissions to the file are currently set to domain
> > admins only, the share permission is domain users.. but ordinary
> > domain users can still see the share.. (with access denied)
> >
> > I thought the shares were not suppose to be invisible to those without
> > access?
> >
> > Any troubleshooting ideas would be appreciated
> >
> > Donna
> >
>
>
>

 

[SuperPuper]

Hi, Donna.
I think that ABE property has impact only at visibility the file and folders
which situated UNDER the shared folder level.
Please, read the
http://download.microsoft.com/downl...B0-450E-8E56-26105D4B092E/Accessbasedenum.doc

Regards.


"Donna Harrison" wrote:

> ok..I have also changed the *share* permission to domain admins.. All users
> can still see this share. It is not hidden..
>
> A previous response from Mathieu stated ABE is for folder and files only..
> not shares.. If this is true.. why do you need it?
>
> I can accomplished the same thing by allowing specific groups access to
> folders under a share name. All share names are visible to all users, but
> access is denied.
>
> I was hoping that ABE would make all shares invisible except for those the
> user has permission.
>
> Microsoft states " ABE filters shared folders visible to a user based on
> that individual user’s access rights, preventing the display of folders or
> other shared resources that the user does not have rights to access. "
>
> Donna
>
> "Meinolf Weber (Myweb)" wrote:
>
> > Hello Donna,
> >
> > You wrote share permission is set to domain users, so ofcourse the users
> > will see the share and because they do not have more rights, they get access
> > denied.
> >
> > Best regards
> >
> > Meinolf Weber (Myweb)
> > Disclaimer: This posting is provided "AS IS" with no warranties, and confers
> > no rights.
> >
> > > Hi.. I have a I386 Windows 2003 R2 SP2 with ABE enabled for all
> > > shares, (and I have checked the properties of each share as well)
> > >
> > > The security permissions to the file are currently set to domain
> > > admins only, the share permission is domain users.. but ordinary
> > > domain users can still see the share.. (with access denied)
> > >
> > > I thought the shares were not suppose to be invisible to those without
> > > access?
> > >
> > > Any troubleshooting ideas would be appreciated
> > >
> > > Donna
> > >
> >
> >
> >