Access Based Enumeration enabled

[Guest Donna Harrison]

Hi.. I have a I386 Windows 2003 R2 SP2 with ABE enabled for all shares, (and

I have checked the properties of each share as well)

 

The security permissions to the file are currently set to domain admins

only, the share permission is domain users.. but ordinary domain users can

still see the share.. (with access denied)

 

I thought the shares were not suppose to be invisible to those without access?

 

Any troubleshooting ideas would be appreciated

 

Donna

[Guest Mathieu CHATEAU]

Re: Access Based Enumeration enabled

 

Hello,

 

it only acts on files/folders access, not on the share themselves

 

--

Cordialement,

Mathieu CHATEAU

http://lordoftheping.blogspot.com

 

 

"Donna Harrison" <DonnaHarrison@discussions.microsoft.com> wrote in message

news:27AC0EB5-D762-4788-83BB-6F7EA653E315@microsoft.com...

> Hi.. I have a I386 Windows 2003 R2 SP2 with ABE enabled for all shares,

> (and

> I have checked the properties of each share as well)

>

> The security permissions to the file are currently set to domain admins

> only, the share permission is domain users.. but ordinary domain users

> can

> still see the share.. (with access denied)

>

> I thought the shares were not suppose to be invisible to those without

> access?

>

> Any troubleshooting ideas would be appreciated

>

> Donna

[Guest Meinolf Weber (Myweb)]

Re: Access Based Enumeration enabled

 

Hello Donna,

 

You wrote share permission is set to domain users, so ofcourse the users

will see the share and because they do not have more rights, they get access

denied.

 

Best regards

 

Meinolf Weber (Myweb)

Disclaimer: This posting is provided "AS IS" with no warranties, and confers

no rights.

> Hi.. I have a I386 Windows 2003 R2 SP2 with ABE enabled for all

> shares, (and I have checked the properties of each share as well)

>

> The security permissions to the file are currently set to domain

> admins only, the share permission is domain users.. but ordinary

> domain users can still see the share.. (with access denied)

>

> I thought the shares were not suppose to be invisible to those without

> access?

>

> Any troubleshooting ideas would be appreciated

>

> Donna

>

[Guest Donna Harrison]

Re: Access Based Enumeration enabled

 

ok..I have also changed the *share* permission to domain admins.. All users

can still see this share. It is not hidden..

 

A previous response from Mathieu stated ABE is for folder and files only..

not shares.. If this is true.. why do you need it?

 

I can accomplished the same thing by allowing specific groups access to

folders under a share name. All share names are visible to all users, but

access is denied.

 

I was hoping that ABE would make all shares invisible except for those the

user has permission.

 

Microsoft states " ABE filters shared folders visible to a user based on

that individual user’s access rights, preventing the display of folders or

other shared resources that the user does not have rights to access. "

 

Donna

 

"Meinolf Weber (Myweb)" wrote:

> Hello Donna,

>

> You wrote share permission is set to domain users, so ofcourse the users

> will see the share and because they do not have more rights, they get access

> denied.

>

> Best regards

>

> Meinolf Weber (Myweb)

> Disclaimer: This posting is provided "AS IS" with no warranties, and confers

> no rights.

>

> > Hi.. I have a I386 Windows 2003 R2 SP2 with ABE enabled for all

> > shares, (and I have checked the properties of each share as well)

> >

> > The security permissions to the file are currently set to domain

> > admins only, the share permission is domain users.. but ordinary

> > domain users can still see the share.. (with access denied)

> >

> > I thought the shares were not suppose to be invisible to those without

> > access?

> >

> > Any troubleshooting ideas would be appreciated

> >

> > Donna

> >

>

>

>

[Guest SuperPuper]

Re: Access Based Enumeration enabled

 

Hi, Donna.

I think that ABE property has impact only at visibility the file and folders

which situated UNDER the shared folder level.

Please, read the

http://download.microsoft.com/download/4/9/8/498EEEEF-97B0-450E-8E56-26105D4B092E/Accessbasedenum.doc

 

Regards.

 

 

"Donna Harrison" wrote:

> ok..I have also changed the *share* permission to domain admins.. All users

> can still see this share. It is not hidden..

>

> A previous response from Mathieu stated ABE is for folder and files only..

> not shares.. If this is true.. why do you need it?

>

> I can accomplished the same thing by allowing specific groups access to

> folders under a share name. All share names are visible to all users, but

> access is denied.

>

> I was hoping that ABE would make all shares invisible except for those the

> user has permission.

>

> Microsoft states " ABE filters shared folders visible to a user based on

> that individual user’s access rights, preventing the display of folders or

> other shared resources that the user does not have rights to access. "

>

> Donna

>

> "Meinolf Weber (Myweb)" wrote:

>

> > Hello Donna,

> >

> > You wrote share permission is set to domain users, so ofcourse the users

> > will see the share and because they do not have more rights, they get access

> > denied.

> >

> > Best regards

> >

> > Meinolf Weber (Myweb)

> > Disclaimer: This posting is provided "AS IS" with no warranties, and confers

> > no rights.

> >

> > > Hi.. I have a I386 Windows 2003 R2 SP2 with ABE enabled for all

> > > shares, (and I have checked the properties of each share as well)

> > >

> > > The security permissions to the file are currently set to domain

> > > admins only, the share permission is domain users.. but ordinary

> > > domain users can still see the share.. (with access denied)

> > >

> > > I thought the shares were not suppose to be invisible to those without

> > > access?

> > >

> > > Any troubleshooting ideas would be appreciated

> > >

> > > Donna

> > >

> >

> >

> >