FG

September 2008 - Posts

Windows 2003 ABE (Access Based Enumeration)

A few comments on ABE:

  • ABE can NOT be used to control visibility of SHARES, just control visibility of folders and files within a share
  • ABE can be used to control visibility of DFS Folders within a DFS Namespace
  • KB Article 907458 describes how to do this, but IMHO it is wrong, saying CACLS has to be used on the DFS folder (they call it link, which it was called in a pre Windows 2003 R2 environment, the new GUI calls it folders instead of links).
    Instead of using CACLS \\DOMAIN\DFSNAMESPACE\FOLDER use CACLS x:\DFSROOTS\DFSNAMESPACE\Folder where C:\DFSROOTS is the DFS root folder you've chosen when adding the server as a namespace server. This will have to be performed on every namespace server hosting the DFS Namespace.
    You still have to enable ABE on the DFSROOT. 
Posted: 09-18-2008 14:03 by Frank Grossmann | with no comments
Filed under: , , , , ,