asked on Remote Desktop security
I just began to test users connecting via Remote Desktop.
When I log in as a user they can see all the folders, but cannot access the ones they do not have permission to.
In Active Directory they cannot see the folders they do not have access to.
I have ABE set correctly but users can still see the files
![Access Based Enumeration]()
When I log in as a user they can see all the folders, but cannot access the ones they do not have permission to.
In Active Directory they cannot see the folders they do not have access to.
I have ABE set correctly but users can still see the files
Remote AccessActive DirectorySecurity
Last Comment
J.R. Sitman
ABE only applies to access via SMB shares. It does nothing for local storage.
ASKER
Can you elaborate?
You are trying to use ABE to hide folders that users don't have access to. That only works on file servers. You cannot hide local folders via permissions. You can only hide folders by setting the hidden attribute, which will hide from all users.
Your help has saved me hundreds of hours of internet surfing.
fblack61
ASKER
The folders I'm trying to hide our on a file server.
Is the file server the terminal server?
ASKER
No. I'm connecting from home to our office
Get an unlimited membership to EE for less than $4 a week.
Unlimited question asking, solutions, articles and more.
In Active Directory they cannot see the folders they do not have access to.
What do you mean? On the actual DC? Also, ABE is not live, if you go to a share and setup change ABE after viewing the content, you need to logoff and on again
ASKER
Let's say I log on to the File server and I can see 25 folders. I then log on as a user and because of the permissions, I have on the folders the user can only see 10 folders.
If I connect to the file server from outside the company and log on as the same user, they can see all 25 folders. They just cannot access all 25, only the 10 they have permission to.
If I connect to the file server from outside the company and log on as the same user, they can see all 25 folders. They just cannot access all 25, only the 10 they have permission to.
ASKER
I still need feedback on my last post
This is the best money I have ever spent. I cannot not tell you how many times these folks have saved my bacon. I learn so much from the contributors.
rwheeler23
ASKER CERTIFIED SOLUTION
Log in or sign up to see answer
Become an EE member today7-DAY FREE TRIAL
Members can start a 7-Day Free trial then enjoy unlimited access to the platform
or
Learn why we charge membership fees
We get it - no one likes a content blocker. Take one extra minute and find out why we block content.
Not exactly the question you had in mind?
Sign up for an EE membership and get your own personalized solution. With an EE membership, you can ask unlimited troubleshooting, research, or opinion questions.
ask a question
Re-engaged with the question.
ASKER
Thanks