Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm using Windows Home Server 2011 and connecting to it with various Windows 7 version clients.

Suppose I have a shared directory (or server folder) mydir on my WHS box which contains a subdirectory private. When a given client lists the contents of mydir, is it possible to instruct WHS to display private only if the given user is authorized? It's easy enough to prevent access to private but I don't even want it listed.

Note that marking the directory as hidden is not at all what I want to do since that would also force an authorized user to change the viewing state of hidden directoies and files and could be easily undermined by anyone that can list the contents of mydir.

share|improve this question

Using Access Based Enumeration correctly will do exactly what you want (in fact, that's what it's made for), but I'm not having much luck finding good information on usage in WHS 2011 in particular. This blog post indicates all the ways that ABE can be enabled (or not), and this StackOverflow question indicates that ABE is available in WHS 2011.

share|improve this answer
Official description here, and it's available starting with Server 2003 SP1. – grawity Oct 19 '11 at 18:09
Are all the same wizards/snap-ins available in WHS 2011 though? – afrazier Oct 19 '11 at 18:19

The only way to hide the contents of a folder from someone is to remove read access to the folder. Once you have read access to a folder then you can see all the members of the folder – whether the user has further access to the individual members or not.

share|improve this answer
I can hide the contents of the folder indeed, that's not a problem but I like to hide the folder as well since the user can't access or view it anyways. I dug into it on google and think it's called 'Access-based Enumeration' for Windows Server 2003 but can't find it on WHS 2011 :( – Mark Sep 26 '11 at 13:53
@Mark That's a new one on me – only applies to access over shares but that should be OK. The first WHS was derived from Win2k3, so it might work for you. First search hit was which includes a link to a tool to set this flag (on a share, rather than a folder within that share). – Richard Sep 26 '11 at 13:58
I am just afraid that update only works for Windows Server 2003 and will make my current Windows Home Server 2011 crash. Is that a possibility or can I safely try? – Mark Sep 26 '11 at 14:06
Because at the download page… it says supported OS Windows Server 2003 – Mark Sep 26 '11 at 14:09
@Mark Have you tried it? It will probably work. – Richard Sep 26 '11 at 14:15

I don't have experience with Home Server, but Windows file sharing in general does not provide that capability. (EDIT: Looks like Home Server does offer that functionality) If you look at the file sharing permissions, you can assign a user a permission of Read, or Read/Write. That's it. There are a lot more permissions available to local accounts, but even those don't allow to not list a certain folder.

The only thing I can think of that would prevent the user of seeing it would be to use FTP where you can have much finer control over what a user has access to thanks to virtual directories.

One thing that you might want to try is to have a different share folder for regular users versus a private user. The directory for regular users would have all the files. For the private user, you could have another folder that uses junction points (mklink) to point to the main folder, then has the "private" folder separate inside. I'm not sure if using junction points link this would work for SMB, but it might work.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.