The GUI and the Commandline-Tool including the Whitepaper for Access-based Enumeration are finally available for some time. I wanted to blog this earlier, but have been busy and ill.
Back to ABE: There are three different Versions for i386, x64 and ia64. Downloads for all versions are available on the Microsoft Download Center: Windows Server 2003 Access-based Enumeration.
After you downloaded it, you need to install the package on a Windows Server 2003 with SP1. Afterwards you'll recognize an additional Tab named "Access-based Enumeration" on the properties of a shared folder in Windows Explorer. Note that you won't see this additional tab if you just enabled sharing on the folder. Close the properties of the folder and reopen it to see the tab. Now looking on the Access-based Enumeration-tab you can select whether to enable/disable ABE, and if you want to apply that setting to all shared folders on the current computer.
Additional to the tab the ABEUI.msi there's a Whitepaper installed in your Program Files\Microsoft Corporation\Windows Server 2003 Access-based Enumeration-Folder. And the third component of the installation is the Commandline-Tool ABECMD.exe. It takes the parameters /enable and /disable to configure a shared folder using ABE or not, the parameter /server for remote administration and /all to specify all shared folders on a server.
Now the most important part: If you don't want to do a full install of all components on every Server where you like ABE (why would you want the whitepaper sitting on every server) you are able to install the GUI-Tab or Commandline-Tool separately as well: you can just copy ABECMD.exe from the %windir%\system32-Folder to the servers where you want it. If you want the Tab you need to copy ABEUI.dll and run the following command to register it:
Remember that you need the Service Pack 1 for Windows Server 2003 to finally get Access-based Enumeration.