LKBEN10624: Howto activate access based enumeration on a specific share under windows
Symptom
The users can see a lot of directories. For the most of them the user has no rights and becomes an error message
Cause
This is by design
Solution
To solve this problem you can install access based enumeration (=ABE). With ABE installed the user will only see the directories if he has enough rights to access that directory. Therefore you need to install ABEUI.msi which can be found on the microsoft website. This utility is free and has to be installed on the server. After installation you can use a command line to access individuel ABE settings per share.
To enable ABE on a single share you use the following command:
abecmd /enable lubbyshare
Access based enumeration is not cluster aware. You need to generate an application with a commandline like the following
cmd /c abecmd /enable lubbyshare
This should be done after the resource comes online.
Disclaimer:
The information provided in this document is intended for your information only. Lubby makes no claims to the validity of this information. Use of this information is at own risk!About the Author
Author: - Keskon GmbH & Co. KG
Wim Peeters is electronics engineer with an additional master in IT and over 30 years of experience, including time spent in support, development, consulting, training and database administration. Wim has worked with SQL Server since version 6.5. He has developed in C/C++, Java and C# on Windows and Linux. He writes knowledge base articles to solve IT problems and publishes them on the Lubby Knowledge Platform.