Advanced Windows PowerShell Scripting Video Training

Advanced Windows PowerShell Scripting Video Training
Advanced Windows PowerShell Scripting Video Training

Monday, December 21, 2009

Does 2008 have ABE turned on by default?

Yes it does. Access Based Enumeration allows Windows Server to hide folders in shares that a user does not have permissions to open. For example, lets say that we have a share named Public. Both Jack and Jill have change permission on the share. There are 2 folders inside of the Public folder. Jack has read permission to both folder 1 and folder 2. Jill only has write permission to folder 2. Without Access Based Enumeration, when Jill accessed the Public share, she would see both folders. With Access Based Enumeration, Jill would see only folder 2, but Jack will see both folder 1 and folder2. This is because Jill does not have any NFTS permissions on folder 1.

In Server 2008, Access Based Enumeration is turned on by default on network shares. For it to work, the users must access the data through a share. It will not function for locally logged on users accessing the data directly.

To manually enable/disable ABE:

Click Start Administrative Tools

Share and Storage Management

Right mouse click the share and select Properties.

Click the Advanced button.

Be default, the Enable Access-based enumeration check box should be checked.

No comments: