Nuo Yan

Problem Solved

Recent Posts

Tags

News


  • Follow me on twitter: @nuoyan
    Make a donation to this Blog by PayPal. Thanks!





    Nuo is currently a Software Development Engineer in a Seattle-based software company.




    Locations of visitors to this page

    The information in this weblog is provided "AS IS" with no warranties, and confers no rights. This weblog does not represent the thoughts, intentions, plans or strategies of my school or employer. It is solely my opinion. Inappropriate comments will be deleted at the authors discretion. All code samples are provided "AS IS" without warranty of any kind, either express or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.


Community

Email Notifications

Archives

Access-Based Enumeration - A new powerful funtion in Windows Server 2003

If you are an experienced IT Engineer or System Administrator, you must have met this situation:

Some people in the organization have no permission to access some specific shared folders on the File Server. However, they are still able to see those shared folders listed in Windows Explorer. Administrators can hardly hide those shared folders to make those people without permissions cannot see them.

Now, a new powerful tool is coming out: the abetool. This tool will enable you to hide the shares to those people don't have permissions. Everyone will only be able to see the shares which they have permissions to access.

As I know, the abetool will only be able to run on Windows Server 2003 Service Pack 1 and X64 versions. If you need more detailed information, please reference the Windows Server official web site when the Service Pack 1 ships.

Related information:

http://blogs.technet.com/jhoward/archive/2005/02/11/371080.aspx

http://blogs.technet.com/windowsserver/archive/2005/03/24/401840.aspx

Posted: Tue, Mar 29 2005 0:04 by Nuo Yan | with 12 comment(s)
Filed under:

Comments

Nuo Yan said:

Scriptlogic has a product that does this from a GUI. It is called cloak
# March 30, 2005 2:09 PM

TrackBack said:

# June 3, 2005 1:54 AM

Nuo Yan said:

Right. but the abetool will save the budget. :-)
# June 6, 2005 11:25 PM

Nuo Yan said:

I installed SP1 and ABE from MS website,

http://www.microsoft.com/downloads/details.aspx?FamilyId=04A563D9-78D9-4342-A485-B030AC442084&displaylang=en

Even after switching on ABE on a share, users are able to see the folders they don't have permissions to. These folders are below the share on which I switched ABE on. They still cannot access that folder like before.

So, ABE doesn't seems to work. Any similar experiences??
# July 6, 2005 12:20 PM

Nuo Yan said:

Works a treat!
# July 18, 2005 11:05 PM

Nuo Yan said:

It doesn't work for me. I'm still able to see the folders for which I don't have permission.
# August 5, 2005 8:51 AM

Nuo Yan said:

NOPE, IT DOESN'T WORK FOR ME EITHER!!!
# November 10, 2005 8:20 AM

Nuo Yan said:

There is a free GUI available for ABE from MS. The technology works flawlessly and won't bog down your servers with filter driver. Best of all it's free. If you want to manage ABE (and manage shares in general) using Group Policy, check out the beta of PolicyMaker Share Manager.

# November 12, 2005 6:34 PM

Joe McEvoy said:

It works fine. If you are an admin then you have rights no matter what. Just because you are not listed in the group folder doesnt mean admins loose rights.

Are you doing it through Group policy or directly from the server.

This site helped me a bit.
http://thelazyadmin.com/index.php?/archives/72-Access-Based-Enumeration.html
# March 22, 2006 7:14 PM

rape stories said:

Best of the text i read about a problem.
# June 1, 2006 10:23 PM

KlaudSCH said:

Hello!

I'm newbie there and that's why I need some help.

Can you give me some info and some links where I can get general help on using forum.

I think that this info will be usefull not only for me.

Thanks a lot!

P.S. Pardon me for my making this thread in wrong section

____

<a href=xgloq.net/.../a>...I'm lovin' it :)

# July 10, 2007 2:22 AM

Moneymakers said:

This Money makers System Makes Me At Least $171,168.06 Per Month And You Can Start Using This Money makers 15 Minutes From Now! http://getmymoneymakers.com/

"Guaranteed to work even if you're "un-motivated"...

In fact, it's best if you only put in an hour or so per day!"

http://getmymoneymakers.com/

# November 13, 2009 7:49 PM
Leave a Comment

(required) 

(required) 

(optional)

(required)