+ Post New Thread
Page 1 of 2 12 LastLast
Results 1 to 15 of 16
Windows Thread, Windows Server 2003 Access-based Enumeration in Technical; ABE is the technology built into Windows Server 2003 Service Pack 1 that provides the administrator of a resource control ...
  1. #1
    Kyle's Avatar
    Join Date
    Jan 2006
    Posts
    974
    Thank Post
    91
    Thanked 14 Times in 13 Posts
    Rep Power
    21

    Windows Server 2003 Access-based Enumeration

    ABE is the technology built into Windows Server 2003 Service Pack 1 that provides the administrator of a resource control over who can see shared folders and files. In essence, the goal of ABE is to keep users from seeing the files and folders to which they don't have access.

    This is ideal for any organization that wants to hide files or folders under share points. If the user is omitted from the access control list (ACL) or is specifically denied the ability to read or list the resource, the file or folder will not be visible when browsing the shared folder resources in Windows Explorer. For HR-related resources, medical organizations, highly secure organizations or any organization that benefits from denying visible access to resources based on the ACL, ABE is an ideal solution.

    How many of you use this?

  2. #2

    Join Date
    Mar 2007
    Location
    The North of England
    Posts
    209
    Thank Post
    1
    Thanked 3 Times in 3 Posts
    Rep Power
    16

    Re: Windows Server 2003 Access-based Enumeration

    I do, we have a shared areas folder for students of all years to access, inside that folder is one for a each year group I set permissions on these folders for the year group and set ABE on the shared areas. When a student access the shared areas folder all they see is the year 7 folder and so on.

    I find it useful to tidy up areas for users as there a so many folders around on the network that they only need to see the ones that they can access. If they can't see them they can't make attempts to access them either by other means.

    I like it and use it quite a lot.

    Chris

  3. #3

    Join Date
    Jul 2005
    Location
    Suffolk
    Posts
    17
    Thank Post
    0
    Thanked 0 Times in 0 Posts
    Rep Power
    0

    Re: Windows Server 2003 Access-based Enumeration

    I have been using it for sometime and it works well. I use it, for example, to hide staff only folders from pupils on our common shared folder we have. I also use it on our common desktop folders to assign shortcuts to users.

  4. #4

    john's Avatar
    Join Date
    Sep 2005
    Location
    London
    Posts
    10,619
    Thank Post
    1,499
    Thanked 1,053 Times in 922 Posts
    Rep Power
    304

    Re: Windows Server 2003 Access-based Enumeration

    Heh, I haven't really noticed this, but it is used in Sharepoint Server as the students don't see the tab for the Facility E-portal or the Staff Site or anything they are not allowed to so those that don't do a subject don't see that subject etc.

  5. #5
    tosca925's Avatar
    Join Date
    Aug 2005
    Location
    Midlands
    Posts
    1,547
    Thank Post
    4
    Thanked 4 Times in 4 Posts
    Rep Power
    22

    Re: Windows Server 2003 Access-based Enumeration

    I like the sound of this, a bit of reading to be done i think.

  6. #6

    plexer's Avatar
    Join Date
    Dec 2005
    Location
    Norfolk
    Posts
    13,726
    Thank Post
    667
    Thanked 1,638 Times in 1,463 Posts
    Rep Power
    424

    Re: Windows Server 2003 Access-based Enumeration


  7. #7

    ZeroHour's Avatar
    Join Date
    Dec 2005
    Location
    Edinburgh, Scotland
    Posts
    5,750
    Thank Post
    918
    Thanked 1,336 Times in 816 Posts
    Blog Entries
    1
    Rep Power
    448

    Re: Windows Server 2003 Access-based Enumeration

    Did not even realise this existed. Thanks tons
    I am playing with it all right now.
    Any caveats?

  8. #8
    apeo's Avatar
    Join Date
    Sep 2005
    Location
    Lost
    Posts
    1,612
    Thank Post
    95
    Thanked 115 Times in 111 Posts
    Rep Power
    42

    Re: Windows Server 2003 Access-based Enumeration

    Anyone get any errors installing? I get an error saying its missing a cabinet file.

  9. #9
    apeo's Avatar
    Join Date
    Sep 2005
    Location
    Lost
    Posts
    1,612
    Thank Post
    95
    Thanked 115 Times in 111 Posts
    Rep Power
    42

    Re: Windows Server 2003 Access-based Enumeration

    Nevermind, would seem that my first download didnt complete properly as it installed fine after i downloaded it again.

  10. #10
    Bestbett's Avatar
    Join Date
    Apr 2007
    Location
    Hiding
    Posts
    46
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Windows Server 2003 Access-based Enumeration

    We seem to have share problems when the students use the Up key in Explorer to get to the "main server" level share. (Where all un hidden shares and printers live.) Would ABE allow me to restrict them from accessing that main level? This would be fantastic as our current solution is to take it off the image.

  11. #11

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Windows Server 2003 Access-based Enumeration

    Correct, if they don't have read access to the share and/or folder then it doesn't exist as far as they are concerned.

  12. #12
    Bestbett's Avatar
    Join Date
    Apr 2007
    Location
    Hiding
    Posts
    46
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Windows Server 2003 Access-based Enumeration

    I have installed and setup ABE on a test environment, and it doesnt work exactly as I want. It does work slick for making folders within a share invisible, however the shares themselves if not hidden with a $ still show up. I suppose I could make every share hidden but that seems like a lot of trouble for the staff when I just want to keep students from hitting up and seeing all shares and printers at the main level. Do I have something misconfigured or missed.

  13. #13

    Geoff's Avatar
    Join Date
    Jun 2005
    Location
    Fylde, Lancs, UK.
    Posts
    11,804
    Thank Post
    110
    Thanked 583 Times in 504 Posts
    Blog Entries
    1
    Rep Power
    224

    Re: Windows Server 2003 Access-based Enumeration

    You could use DFS and use separate DFS trees for staff and pupils?

  14. #14
    Bestbett's Avatar
    Join Date
    Apr 2007
    Location
    Hiding
    Posts
    46
    Thank Post
    4
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Re: Windows Server 2003 Access-based Enumeration

    DFS doesn't seem to do a whole lot for me that I cant do with permissions and groups on normal shares? I have never used DFS for this reason, so maybe I don't understand how I could better implement it. Here is my situation and my imagined way of stopping it.

    Student logs in; using a share they are allowed in they open said share in an explorer window; they then use the up arrow to go to the \\%servername% area where they can see unhidden shares and printers; they can hit up once again to "browse" through all computers on the network to look for some teacher who got a share created and left it wide open.

    This is what I want to stop; I want to "corral" students and keep them from browsing around servers or clients not specifically shared to them.

  15. #15

    Join Date
    May 2006
    Posts
    159
    Thank Post
    5
    Thanked 10 Times in 5 Posts
    Rep Power
    18

    Re: Windows Server 2003 Access-based Enumeration

    Quote Originally Posted by Bestbett
    I have installed and setup ABE on a test environment, and it doesnt work exactly as I want. It does work slick for making folders within a share invisible, however the shares themselves if not hidden with a $ still show up. I suppose I could make every share hidden but that seems like a lot of trouble for the staff when I just want to keep students from hitting up and seeing all shares and printers at the main level. Do I have something misconfigured or missed.

    Sounds like your permissions are not configured correctly and students have some read access still in place.

SHARE:
+ Post New Thread
Page 1 of 2 12 LastLast

Similar Threads

  1. Windows Server 2003 - time server settings
    By CESIL in forum Windows
    Replies: 4
    Last Post: 22nd November 2007, 11:24 AM
  2. Windows 2003 Server Restricted Access
    By deepusurana in forum Windows
    Replies: 19
    Last Post: 12th October 2007, 09:39 AM
  3. Replies: 5
    Last Post: 5th July 2007, 11:43 PM
  4. Windows Server 2003 File Server Resource Manager
    By mrforgetful in forum Windows
    Replies: 1
    Last Post: 17th June 2007, 01:51 PM
  5. Access based Enumeration
    By ChrisH in forum Windows
    Replies: 2
    Last Post: 28th June 2005, 01:27 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •