Windows Server 2008 - Network Shared Folder Permissions
I have expanded the DFS drives on a server
.
1. I expanded the iperc drive setup
2. I created the drives in the OS
3. I restarted the DFS replication
.
Everything looks fine, DFS replicated over the weekend ...
.
Now I see that the shared network folders are NOW visible to any user
the Permissions are still set, so you can not get into a folder you do not have permission to get into
however you can still see all of the folders regardless of who you are
.
Example from a Network Folder : Sharing_Executive
Permissions : SYSTEM , EXECUTIVE_GRP , ADMINISTRATOR, ADMINISTRATORS
--- Every user can see this folder
.
.
How do I get the Network drives to show to ONLY those people that can use them ?
.
1. I expanded the iperc drive setup
2. I created the drives in the OS
3. I restarted the DFS replication
.
Everything looks fine, DFS replicated over the weekend ...
.
Now I see that the shared network folders are NOW visible to any user
the Permissions are still set, so you can not get into a folder you do not have permission to get into
however you can still see all of the folders regardless of who you are
.
Example from a Network Folder : Sharing_Executive
Permissions : SYSTEM , EXECUTIVE_GRP , ADMINISTRATOR, ADMINISTRATORS
--- Every user can see this folder
.
.
How do I get the Network drives to show to ONLY those people that can use them ?
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
....
It seems that Windows Server 2008 std does not have the gui option
.
To enable access-based enumeration by using the Windows interface
In the console tree, under the Namespaces node, right-click the appropriate namespace and then click Properties .
Click the Advanced tab and then select the Enable access-based enumeration for this namespace check box.
.
the attached picture shows that do not have that option
.
DFS.jpg
It seems that Windows Server 2008 std does not have the gui option
.
To enable access-based enumeration by using the Windows interface
In the console tree, under the Namespaces node, right-click the appropriate namespace and then click Properties .
Click the Advanced tab and then select the Enable access-based enumeration for this namespace check box.
.
the attached picture shows that do not have that option
.
DFS.jpg
ASKER
.
So it looks like I need to migrate the DFS to Windows Server 2008 Mode
.
http://technet.microsoft.com/en-us/library/cc753875.aspx
.
So I need to shut down my namespace
Delete it
Create a new one in win Svr 2008 Mode
start replication again
.
then go into DFS management and the namespace should have the Enable Access-Based Enumeration option
.
this will put me on hold until I have the option to get this done
.
is there anything I can do?
I know that the folders didn't display BEFORE I expanded the drive
All I did was re-activate the same DFS .. I didn't recreate them
It seems to me that there is something I can do to get the folder visibility back to only those that have permissions to view them
.
So it looks like I need to migrate the DFS to Windows Server 2008 Mode
.
http://technet.microsoft.com/en-us/library/cc753875.aspx
.
So I need to shut down my namespace
Delete it
Create a new one in win Svr 2008 Mode
start replication again
.
then go into DFS management and the namespace should have the Enable Access-Based Enumeration option
.
this will put me on hold until I have the option to get this done
.
is there anything I can do?
I know that the folders didn't display BEFORE I expanded the drive
All I did was re-activate the same DFS .. I didn't recreate them
It seems to me that there is something I can do to get the folder visibility back to only those that have permissions to view them
.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
dmwynne is 100% correct : Access-Based Enumeration needs to be enabled
.
Win Svr 2008 std does have ABE gui , its just not in the DFS management like it is in 2008R2
You can also utilize the command line to set it bypassing the gui completely
.
My last comment lists exactly what I had to do to get ABE enabled on my shared folder utilizing the gui
.
Win Svr 2008 std does have ABE gui , its just not in the DFS management like it is in 2008R2
You can also utilize the command line to set it bypassing the gui completely
.
My last comment lists exactly what I had to do to get ABE enabled on my shared folder utilizing the gui
http://www.youtube.com/watch?v=RPw1dAn5tXo
DirkMare