Need some help with Access Based Enumeration windows 2008 R2

I have a shared folder called "shared" and there are other sub-folders:

Shared
--Finance
--Traders
----IRD
----Marketing
----Trading

Software

Analytics

Compliance

OMS

I gave a user(Bob) full control to the Analytics folder and read permission to the "shared", "traders", "trading" and "software". I also enabled ABE from the file sharing role. The problem is that Bob can still see all other folders. How do i fix this?

Find more posts tagged with

Save $250 on 2025 certification boot camps from Infosec!

Book now with code EOY2025

Button

Comments

lsud00d

How are you viewing it?

This feature is active only when viewing files and folders in a shared folder; it is not active when viewing files and folders in the local file system.

http://technet.microsoft.com/en-us/library/dd772681(v=ws.10).aspx

sizeon

I am viewing from a mapped shared drive. I have a login script that maps the "shared" drive.

aftereffector

Dumb question, but you did uncheck the "child folder" option, right?

sizeon

What child folder option? Are you talking about the "replace all child objects with inherit permission"?

sizeon

I figured it out. I had to set the advance NTFS permission to "this folder only".