2

I am using window server 2016 without active directory. I have created some shared folder for users in the server but when users are accessing their folder they are able to see the folder of all other users. I have enable access based enumeration as shown in the following image but still folders are visible for all users. Click here to view the image Please help how to solve it.

| improve this question | |
  • How exactly are users access these folders? Are they logging on to the server and browsing the local folder structure, e.g. c:\SharedData or are they browsing a network share via UNC path? E.g. \\server\share – Mr Ethernet Oct 1 '19 at 5:50
  • Thank you for your quick response Wrecclesham, yes users have user name and password in server and they are accessing network share \\server\shareFolder. I do not want to use $ in the end of folder name which will hide the folder. – Kuldeep Singh Oct 1 '19 at 9:13
  • Are the users each accessing different network shares? E.g. \\server\user1, \\server\user2 etc? I.e. one share per user? OR are the users all accessing the same network share but each has access to a different folder within that same share? Eg \\server\share\folder1`, \\server\share\folder2` etc? – Mr Ethernet Oct 1 '19 at 11:48
  • I'm assuming that the answer to my previous question is that multiple users access the same share but your question reads like there are multiple shares (one per user?) so it's hard to fully understand your situation from the question so far. 🙂 – Mr Ethernet Oct 1 '19 at 12:02
  • hank you for your response Wrecclesham, Yes it is one share per user E.g. \\server\user1, \\server\user2 – Kuldeep Singh Oct 10 '19 at 6:48
1

I do not want to use $ in the end of folder name which will hide the folder.

Access-based enumeration is only designed to hide files and folders within a share, rather than to hide shares themselves. This is why your users are currently able to view the shares which they do not have access to, despite ABE being enabled.

Unfortunately, in this situation, the only option to hide shares from users is by converting them to hidden shares by appending a $ to every network share that you wish to hide.

There is no solution here that involves ABE as that option is powerless to prevent network shares from being enumerated.

ABE is designed to only act on the contents of shares and cannot actually prevent shares themselves from being listed.

| improve this answer | |
-1

here is your answer : https://www.windowscrush.com/hide-shared-folders-from-those-who-do-not-have-permissions.html you need to create a top shared directory containing different directories on which you setup the correct NTFS access for each groups/users.

basically, there a special checkbox for what you need "enable access-based enumeration". On the server windows 2016, Server Manager > File and Storage Services > Shares : right-click the top Shared directory > properties and inside "Settings" check "enable access-based enumeration"

| improve this answer | |
New contributor
jkimo2 is a new contributor to this site. Take care in asking for clarification, commenting, and answering. Check out our Code of Conduct.
  • Please quote and cite relevant information from your link. – Ramhound 23 mins ago

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.