Need some help with Access Based Enumeration windows 2008 R2

sizeon

I have a shared folder called "shared" and there are other sub-folders:

Shared
--Finance
--Traders
----IRD
----Marketing
----Trading

---

Software

---

Analytics

---

Compliance

---

OMS

I gave a user(Bob) full control to the Analytics folder and read permission to the "shared", "traders", "trading" and "software". I also enabled ABE from the file sharing role. The problem is that Bob can still see all other folders. How do i fix this?

lsud00d

How are you viewing it?

This feature is active only when viewing files and folders in a shared folder; it is not active when viewing files and folders in the local file system.

http://technet.microsoft.com/en-us/library/dd772681(v=ws.10).aspx

sizeon

I am viewing from a mapped shared drive. I have a login script that maps the "shared" drive.

aftereffector

Dumb question, but you did uncheck the "child folder" option, right?

sizeon

What child folder option? Are you talking about the "replace all child objects with inherit permission"?

sizeon

I figured it out. I had to set the advance NTFS permission to "this folder only".