Guest Donna Harrison Posted August 24, 2007 Posted August 24, 2007 Hi.. I have a I386 Windows 2003 R2 SP2 with ABE enabled for all shares, (and I have checked the properties of each share as well) The security permissions to the file are currently set to domain admins only, the share permission is domain users.. but ordinary domain users can still see the share.. (with access denied) I thought the shares were not suppose to be invisible to those without access? Any troubleshooting ideas would be appreciated Donna
Guest Mathieu CHATEAU Posted August 24, 2007 Posted August 24, 2007 Re: Access Based Enumeration enabled Hello, it only acts on files/folders access, not on the share themselves -- Cordialement, Mathieu CHATEAU http://lordoftheping.blogspot.com "Donna Harrison" <DonnaHarrison@discussions.microsoft.com> wrote in message news:27AC0EB5-D762-4788-83BB-6F7EA653E315@microsoft.com... > Hi.. I have a I386 Windows 2003 R2 SP2 with ABE enabled for all shares, > (and > I have checked the properties of each share as well) > > The security permissions to the file are currently set to domain admins > only, the share permission is domain users.. but ordinary domain users > can > still see the share.. (with access denied) > > I thought the shares were not suppose to be invisible to those without > access? > > Any troubleshooting ideas would be appreciated > > Donna
Guest Meinolf Weber (Myweb) Posted August 24, 2007 Posted August 24, 2007 Re: Access Based Enumeration enabled Hello Donna, You wrote share permission is set to domain users, so ofcourse the users will see the share and because they do not have more rights, they get access denied. Best regards Meinolf Weber (Myweb) Disclaimer: This posting is provided "AS IS" with no warranties, and confers no rights. > Hi.. I have a I386 Windows 2003 R2 SP2 with ABE enabled for all > shares, (and I have checked the properties of each share as well) > > The security permissions to the file are currently set to domain > admins only, the share permission is domain users.. but ordinary > domain users can still see the share.. (with access denied) > > I thought the shares were not suppose to be invisible to those without > access? > > Any troubleshooting ideas would be appreciated > > Donna >
Guest Donna Harrison Posted August 24, 2007 Posted August 24, 2007 Re: Access Based Enumeration enabled ok..I have also changed the *share* permission to domain admins.. All users can still see this share. It is not hidden.. A previous response from Mathieu stated ABE is for folder and files only.. not shares.. If this is true.. why do you need it? I can accomplished the same thing by allowing specific groups access to folders under a share name. All share names are visible to all users, but access is denied. I was hoping that ABE would make all shares invisible except for those the user has permission. Microsoft states " ABE filters shared folders visible to a user based on that individual user’s access rights, preventing the display of folders or other shared resources that the user does not have rights to access. " Donna "Meinolf Weber (Myweb)" wrote: > Hello Donna, > > You wrote share permission is set to domain users, so ofcourse the users > will see the share and because they do not have more rights, they get access > denied. > > Best regards > > Meinolf Weber (Myweb) > Disclaimer: This posting is provided "AS IS" with no warranties, and confers > no rights. > > > Hi.. I have a I386 Windows 2003 R2 SP2 with ABE enabled for all > > shares, (and I have checked the properties of each share as well) > > > > The security permissions to the file are currently set to domain > > admins only, the share permission is domain users.. but ordinary > > domain users can still see the share.. (with access denied) > > > > I thought the shares were not suppose to be invisible to those without > > access? > > > > Any troubleshooting ideas would be appreciated > > > > Donna > > > > >
Guest SuperPuper Posted October 30, 2007 Posted October 30, 2007 Re: Access Based Enumeration enabled Hi, Donna. I think that ABE property has impact only at visibility the file and folders which situated UNDER the shared folder level. Please, read the http://download.microsoft.com/download/4/9/8/498EEEEF-97B0-450E-8E56-26105D4B092E/Accessbasedenum.doc Regards. "Donna Harrison" wrote: > ok..I have also changed the *share* permission to domain admins.. All users > can still see this share. It is not hidden.. > > A previous response from Mathieu stated ABE is for folder and files only.. > not shares.. If this is true.. why do you need it? > > I can accomplished the same thing by allowing specific groups access to > folders under a share name. All share names are visible to all users, but > access is denied. > > I was hoping that ABE would make all shares invisible except for those the > user has permission. > > Microsoft states " ABE filters shared folders visible to a user based on > that individual user’s access rights, preventing the display of folders or > other shared resources that the user does not have rights to access. " > > Donna > > "Meinolf Weber (Myweb)" wrote: > > > Hello Donna, > > > > You wrote share permission is set to domain users, so ofcourse the users > > will see the share and because they do not have more rights, they get access > > denied. > > > > Best regards > > > > Meinolf Weber (Myweb) > > Disclaimer: This posting is provided "AS IS" with no warranties, and confers > > no rights. > > > > > Hi.. I have a I386 Windows 2003 R2 SP2 with ABE enabled for all > > > shares, (and I have checked the properties of each share as well) > > > > > > The security permissions to the file are currently set to domain > > > admins only, the share permission is domain users.. but ordinary > > > domain users can still see the share.. (with access denied) > > > > > > I thought the shares were not suppose to be invisible to those without > > > access? > > > > > > Any troubleshooting ideas would be appreciated > > > > > > Donna > > > > > > > > >
Recommended Posts