Categories
Welcome Center
Education & Development
Discussions
Certification Preparation
Recent Posts
Groups
Free Resources
Ebooks
Free Workshops
Trending Certifications Infographic
Infosec Training
IT & Security Training
Live Boot Camps
Security Awareness Training
About Infosec Institute
Home
Discussions
Off Topic
Access based enumeration in Server 2012
Whistlestop
I would be grateful for some help with a file sharing issue I have.
I am running Server 2012 r2 and a couple of Win 7 VMs in Virtualbox in order to get more familiar with a domain server environment. I created a folder entitled "K Drive" on the root of C on my Server. I then created a couple of sub folders called HR, Operations
On the K drive, I implemented Shared access to everyone and then used NTFS permissions on the sub folders so that access is as follows:
HR folder has read/write/modify access by staff in the "HR group"
Operations has read/write/modify access by staff in the "operations group"
When a member of the HR group logs in, they click on "My computer" and see that the K drive has been mapped. Opening up this folder shows the two sub folders HR and Operations. They can only read/write to the HR folder which is great. If they try opening the "Operations" folder an error is generated saying that they do not have access (this is as intended)
Same applies to the Operations group of people who can only access the operations folder.
I would now like to go one step further with my scenario and implement an additional feature which prevents folders which groups or users seeing a folder they do not have access to. I read about "Access Based Enumeration" and I have enabled this for the folders in File and storage services>shares. Logged the users out/in but still they are seeing all the folders in the K drive.
Can anyone help me fix this issue please?
Find more posts tagged with
Save $250 on 2025 certification boot camps from Infosec!
Book now with code EOY2025
Button
Comments
There are no comments yet
Quick Links
All Categories
Recent Posts
Activity
Unanswered
Groups
Best Of
INFOSEC Boot Camps
$250
OFF
Use code
EOY2025
to receive $250 off your 2025 certification boot camp!
BROWSE BOOT CAMPS