We help IT Professionals succeed at work.

We've partnered with Certified Experts, Carl Webster and Richard Faulkner, to bring you a podcast all about Citrix Workspace, moving to the cloud, and analytics & intelligence. Episode 2 coming soon!Listen Now


Access-Base Enumeration (ABE) in a cluster

Medium Priority
Last Modified: 2013-11-15
Has anybody gotten ABE to work in a cluster? Everything works fine while the group is on one of it's prefered server. When I move the group to another server, I can go to the properties of the share, click on the tab named "access-based enumeration", but the check mark to "enable Access-based enumerations on this shared folder" becomes unchecked, so ABE isn't working which becomes a problem. Anyone know how to make the setting stick on a failover?

Thanks in advance,
Watch Question

Top Expert 2005

ABE must be installed on all servers to make it available.


ABE is installed on all servers so the tab is there, I just need to check it everytime the group moves.
Top Expert 2005

What volumes are you attempting to set this on?  I suspect the shared storage.

Top Expert 2005

Have you seen this?


ACLs must be the same on the link as the folders themselves.

I need to experiment a bit.  Does this group move on failover?


Not sure if I'm building the correctly so any advice is welcome. I am building a cluster of three servers to act as our file server. to balance load, I created a group called USER that has the user folders and have that on Server2. I created another group for shared folders called SHARED and have that on Server3. Folders from both groups are able to fail over and move between all three servers without any problem. Then I loaded ABE. I changed the rights on test folders that I created and everytihing worked fine. I then moved USER from Server2 to Server3. All resources came up fine. (Physical Disk, File Share, IP address, and Network Name) but I could see all the folders from my test workstation. I looked at the ABE tab on the properties and the checkbox for enable ABE was not checked. Checked it again, clicked ok, and test workstation then shows correct folders. Moved back to Server3 and same problem occurs. Are there scripts that can be run after a failover? Maybe I can use the ABE scripting to re-enable it.

Oh...to answer your question if I didn't already, yes, its shared storage on an HP SAN.


Thanks or the link. I was looking for something like that but my search phrases didn't quite match. I'm in the process of setting up DFS using instructions from article ID 301588. I guess after I've got tht going I'll try to implement your article. Thanks!
Top Expert 2005
Something came to mind.  Is the domain these are in running in (minimum) Windows 2000 Native mode?

I think if these groups were Universal Groups they might work as expected.  Just an idea...

You might be able to script the checkbox, but ABE isn't a really popular thing at MS - kind of a Novell feature that was requested so much they accomodated.  I'd have to play around a bit and I will when I get some spare cycles.  In the meantime let's see where you get to on this.


Not the solution you were looking for? Getting a personalized solution is easy.

Ask the Experts


Well, after reading the link you provided, I was still confused. Did more searching on the web and found a microsoft technet article about it. Followed the instructions and everything works.  http://blogs.technet.com/windowsserver/archive/2005/07/06/407385.aspx

Here's what is says to do:

  1. Install ABE tool from the download location and install it on each of the nodes in the cluster.

  2. From the cluster administrator, for each share in the cluster, create a resource of type “application”. In the command to execute for this resource
  (under parameters), the following command should be entered “cmd /k abecmd /enable <sharename>”. Additionally, if you don’t want that cmd.exe
   will appear on the desktop, ensure that the option “Allow interaction with the desktop” isn’t checked.

  3. Make this resource depend on the share resource. (Make sure that both the application resource and the share resource are part of the same group)

  4. Take the group offline and back online to ensure that the shares that need to be ABE enabled are actually so.

  From this point on, you are good and whenever the share fails over to another node, then ABE setting follows.

Couple of items to note. Create the "generic application" resource in the same group as the file share. When the script refers to <sharename>, use the one that you can see in Computer Management, System tools, shared folders, shares.

Other than that, it works like a charm.
Top Expert 2005

Good job and great info!

Access more of Experts Exchange with a free account
Thanks for using Experts Exchange.

Create a free account to continue.

Limited access with a free account allows you to:

  • View three pieces of content (articles, solutions, posts, and videos)
  • Ask the experts questions (counted toward content limit)
  • Customize your dashboard and profile

*This site is protected by reCAPTCHA and the Google Privacy Policy and Terms of Service apply.


Please enter a first name

Please enter a last name

8+ characters (letters, numbers, and a symbol)

By clicking, you agree to the Terms of Use and Privacy Policy.