Avatar of J.R. Sitman
J.R. Sitman
Flag for United States of America asked on

Remote Desktop security

I just began to test users connecting via Remote Desktop.  

When I log in as a user they can see all the folders, but cannot access the ones they do not have permission to.

In Active Directory they cannot see the folders they do not have access to.

I have ABE set correctly but users can still see the files

Access Based Enumeration
Remote AccessActive DirectorySecurity

Avatar of undefined
Last Comment
J.R. Sitman

8/22/2022 - Mon
kevinhsieh

ABE only applies to access via SMB shares. It does nothing for local storage.
J.R. Sitman

ASKER
Can you elaborate?
kevinhsieh

You are trying to use ABE to hide folders that users don't have access to. That only works on file servers. You cannot hide local folders via permissions. You can only hide folders by setting the hidden attribute, which will hide from all users.
Your help has saved me hundreds of hours of internet surfing.
fblack61
J.R. Sitman

ASKER
The folders I'm trying to hide our on a file server.
kevinhsieh

Is the file server the terminal server?
J.R. Sitman

ASKER
No. I'm connecting from home to our office
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
Shaun Vermaak

In Active Directory they cannot see the folders they do not have access to.

What do you mean? On the actual DC? Also, ABE is not live, if you go to a share and setup change ABE after viewing the content, you need to logoff and on again

J.R. Sitman

ASKER
Let's say I log on to the File server and I can see 25 folders.    I then log on as a user and because of the permissions, I have on the folders the user can only see 10 folders.

If I connect to the file server from outside the company and log on as the same user, they can see all 25 folders.    They just cannot access all 25, only the 10 they have permission to.
J.R. Sitman

ASKER
I still need feedback on my last post
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23
ASKER CERTIFIED SOLUTION
kevinhsieh

Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
Sign up - Free for 7 days
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
kevinhsieh

Re-engaged with the question.
J.R. Sitman

ASKER
Thanks