Re: Access-based enumeration in 2003 SP1?

From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 04/28/05


Date: Thu, 28 Apr 2005 14:06:35 -0500

Yes I have tried it. In my experience it will not stop shares from showing
in My Network Places [shares can be hidden from My Network Places with $
after share name] . However a user who does not have ntfs permissions to a
file folder within a share will not be able to see those files and folders.
This is still very helpful particularly when a top level share is enable for
access to all users and then there are folders within that share that have
permissions on a per user/group basis. I also noticed that if you change
share/ntfs permissions you may need to enable Access Enumeration in that tab
of the share properties again. --- Steve

<jay.griffin@burke.com> wrote in message
news:1114695217.230219.118240@o13g2000cwo.googlegroups.com...
> http://www.microsoft.com/downloads/details.aspx?FamilyID=04a563d9-78d9-4342-a485-b030ac442084&displaylang=en
>
> Anyone tried this tool? We did and it doesn't work. We can still see
> shares that we don't have rights to.
>
> Nick Payne wrote:
>> I thought this feature was supposed to be part of 2003 server SP1,
> but in
>> the SP1 RTM version there is no reference to it in the readme, a
> search of
>> microsoft.com for "access-based enumeration" gets no hits (though I
> found a
>> brief description on the March 2005 Technet DVD), and the utility I
> had
>> heard about for setting the necessary property on the file share
>> (abetool.exe) is not part of the Win2003 SP1 support tools and is
> also not
>> found when searching microsoft.com.
>>
>> Nick
>



Relevant Pages

  • Re: system folders not shared?
    ... would allow XP's system folders to be shared over the network so I can ... Windows XP using Simple File sharing on an NTFS disk will use NTFS ... XP Home Edition does not expose the NTFS permissions UI to let you ... folders available across the network on XP Home: ...
    (microsoft.public.windowsxp.network_web)
  • Re: Printing AD items
    ... There is no practical way to show which folders ... tools for NTFS file and directory permissions. ... The problem with shares is that there is no trivial ... you can list the shares with "net share" on each server. ...
    (microsoft.public.win2000.active_directory)
  • Re: Printing AD items
    ... There is no practical way to show which folders ... tools for NTFS file and directory permissions. ... The problem with shares is that there is no ... you can list the shares with "net share" on each server. ...
    (microsoft.public.win2000.active_directory)
  • Re: cant get access to disk share when connecting from a remote s
    ... > When I am connecting to the shares created by the script I always connect ... > with the admin username and password of the system that the shares are on; ... NTFS permissions on the files and folders themselves. ...
    (microsoft.public.windows.server.scripting)
  • Re: User able to create folders on network drive he had no permission
    ... setup for him on the network was able to create files and folders on ... a network drive he should only have had read access to. ... The PC was setup using a domain admin account (I know, ... difference with the *user* permissions on the network. ...
    (microsoft.public.windowsxp.security_admin)