Re: Access-based enumeration in 2003 SP1?
From: Steven L Umbach (n9rou_at_nospam-comcast.net)
Date: 04/28/05
- Next message: Roberto Murasso \(Tiscali\): "certificate authentication"
- Previous message: Steven L Umbach: "Re: Changing ADMINISTRATOR password on a 2000 domain"
- In reply to: jay.griffin_at_burke.com: "Re: Access-based enumeration in 2003 SP1?"
- Next in thread: Joe Richards [MVP]: "Re: Access-based enumeration in 2003 SP1?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Date: Thu, 28 Apr 2005 14:06:35 -0500
Yes I have tried it. In my experience it will not stop shares from showing
in My Network Places [shares can be hidden from My Network Places with $
after share name] . However a user who does not have ntfs permissions to a
file folder within a share will not be able to see those files and folders.
This is still very helpful particularly when a top level share is enable for
access to all users and then there are folders within that share that have
permissions on a per user/group basis. I also noticed that if you change
share/ntfs permissions you may need to enable Access Enumeration in that tab
of the share properties again. --- Steve
<jay.griffin@burke.com> wrote in message
news:1114695217.230219.118240@o13g2000cwo.googlegroups.com...
> http://www.microsoft.com/downloads/details.aspx?FamilyID=04a563d9-78d9-4342-a485-b030ac442084&displaylang=en
>
> Anyone tried this tool? We did and it doesn't work. We can still see
> shares that we don't have rights to.
>
> Nick Payne wrote:
>> I thought this feature was supposed to be part of 2003 server SP1,
> but in
>> the SP1 RTM version there is no reference to it in the readme, a
> search of
>> microsoft.com for "access-based enumeration" gets no hits (though I
> found a
>> brief description on the March 2005 Technet DVD), and the utility I
> had
>> heard about for setting the necessary property on the file share
>> (abetool.exe) is not part of the Win2003 SP1 support tools and is
> also not
>> found when searching microsoft.com.
>>
>> Nick
>
- Next message: Roberto Murasso \(Tiscali\): "certificate authentication"
- Previous message: Steven L Umbach: "Re: Changing ADMINISTRATOR password on a 2000 domain"
- In reply to: jay.griffin_at_burke.com: "Re: Access-based enumeration in 2003 SP1?"
- Next in thread: Joe Richards [MVP]: "Re: Access-based enumeration in 2003 SP1?"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|