LKBEN10624: Howto activate access based enumeration on a specific share under windows


This article has not been checked!

LKB | Created: 02/04/2020 | Version: 0 | Language: EN | Rating: 0 | Outdated: False | Marked for deletion: False

Author: Wim Peeters - Keskon GmbH & Co. KG


Symptom

The users can see a lot of directories. For the most of them the user has no rights and becomes an error message

Cause

This is by design

Solution

To solve this problem you can install access based enumeration (=ABE). With ABE installed the user will only see the directories if he has enough rights to access that directory. Therefore you need to install ABEUI.msi which can be found on the microsoft website. This utility is free and has to be installed on the server. After installation you can use a command line to access individuel ABE settings per share.

To enable ABE on a single share you use the following command:

abecmd /enable lubbyshare

Access based enumeration is not cluster aware. You need to generate an application with a commandline like the following

cmd /c abecmd /enable lubbyshare

This should be done after the resource comes online.

About the Author

Wim Peeters is electronics engineer with an additional master in IT and over 30 years of experience including time spent in support, development, consulting, training and database administration. Wim has worked with SQL Server since version 6.5. He has developed in C/C++, Java and C# on Windows and Linux in different European countries and different European languages. He writes knowledge base articles to solve IT problems and publishes them on the Lubby Knowledge Platform where he is one of the most important contributors and the main developer.

Disclaimer:

The information provided in this document is intended for your information only. Lubby makes no claims to the validity of this information. Use of this information is at own risk!