Access Based Enumeration 2008- different from different share instances

I have, or so I thought, limited enumeration based on NTFS.  The shared folder in question is hung off a server and uses two instances  \\server\new shared\ and \\server\newshared\ for the same folder.  Note the instance names differ by the presence or lack of a space.

If a user hits the “new shared” with a space, their view is limited based on NTFS perms.  Folders to which they have no permission are not seen.  However, if a user hits “newshared” with no space, they can see all the folders contained.  They are still prevented from accessing the subfolders as they should by NTFS, but now they can see them.
Share level permissions for “New Shared” are, Authenticated Users, domain Users, and Administrators(local) all full control.  The share level permissions for “NewShared” are Authenticated Users, Domain Admins, and Domain Users, again all full control.

As the GPO shared drive mapping is through “new shared” I’m probably going to just kill the “newshared” instance, but I would like to understand.  The mapping GPO is set to “Run in logged on user’s security context”, Show this drive, show all drives, reconnect, with a designated drive letter mapped to “New Shared”.

Clients are Win7-32.  Server is 2008R2 with file server and print server roles.
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Steve WhitcherSystems AdministratorCommented:
Access based enumeration is configured Per-Share.  It sounds like you have that option enabled for one share, and not the other.
Access-based enumeration can be enabled or disabled by using Share and Storage Management

Access-based enumeration can be manually enabled or disabled on individual shared folders and volumes by using Share and Storage Management. This snap-in is available after a folder or volume has been shared. You can access Share and Storage Management in the File Services server role in Server Manager, and in Administrative Tools. You can also install it manually in Server Manager by adding the File Server role service to File Services.
There are two ways to enable and disable access-based enumeration by using Share and Storage Management:
Share a folder or volume by using the Provision a Shared Folder Wizard. If you select the SMB protocol on the Share Protocols page of the Provision a Shared Folder Wizard, the advanced settings options on the SMB Settings page includes the option to enable access-based enumeration on the shared folder or volume. (To see the advanced settings options, on the SMB Settings page of the wizard, click Advanced).

Change the properties of an existing shared folder or volume. To change the properties of an existing shared folder or volume, on the Shares tab of Share and Storage Management, click the shared folder or volume, and then click Properties in the Action pane. The information under Advanced settings displays whether access-based enumeration is enabled. Click Advanced and then select or clear the Enable access-based enumeration check box.

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows Server 2008

From novice to tech pro — start learning today.