Click here to get back home

Restricted file access

 HomeNewsGroups | Search | About
 microsoft.public.windows.server.security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content
Subject Author Date
Restricted file access Todd 04-01-2008
Posted by Todd on April 1, 2008, 9:40 am
Please log in for more thread options
We recently migrated from a Netware environment and are having some issues
with the differences between how Netware and Windows handle file and folder
permissions. We have a top level folder that everyone has access to, and
subfolders with restricted permissions. In Netware, if there were 50
subfolders, but you only had access to 2 of them, when you browsed to the
subfolder level, you would only see 2 folders. In Windows, even though you
may not be able to open the files inside, you still see all 50 folders. Is
there any way to configure permissions in Windows to get behavior more like
we had in Windows?



Posted by Anthony [MVP] on April 1, 2008, 9:47 am
Please log in for more thread options
Hi Todd,
That's Access Based Enumeration, ABE.:
http://www.microsoft.com/windowsserver2003/techinfo/overview/abe.mspx
Anthony,
http://www.airdesk.co.uk


> We recently migrated from a Netware environment and are having some issues
> with the differences between how Netware and Windows handle file and
> folder permissions. We have a top level folder that everyone has access
> to, and subfolders with restricted permissions. In Netware, if there were
> 50 subfolders, but you only had access to 2 of them, when you browsed to
> the subfolder level, you would only see 2 folders. In Windows, even
> though you may not be able to open the files inside, you still see all 50
> folders. Is there any way to configure permissions in Windows to get
> behavior more like we had in Windows?
>



Posted by Todd on April 1, 2008, 12:02 pm
Please log in for more thread options
That sure looks like it will do the job. I wonder why MS doesn't just
include it as part of the OS.

Todd

> Hi Todd,
> That's Access Based Enumeration, ABE.:
> http://www.microsoft.com/windowsserver2003/techinfo/overview/abe.mspx
> Anthony,
> http://www.airdesk.co.uk
>
>
>> We recently migrated from a Netware environment and are having some
>> issues with the differences between how Netware and Windows handle file
>> and folder permissions. We have a top level folder that everyone has
>> access to, and subfolders with restricted permissions. In Netware, if
>> there were 50 subfolders, but you only had access to 2 of them, when you
>> browsed to the subfolder level, you would only see 2 folders. In
>> Windows, even though you may not be able to open the files inside, you
>> still see all 50 folders. Is there any way to configure permissions in
>> Windows to get behavior more like we had in Windows?
>>
>
>



Posted by Anthony [MVP] on April 1, 2008, 12:20 pm
Please log in for more thread options
Its a good question. It is one of those things that has been the case for a
long time. I guess it is really only a problem if you use folder names like
"Imminent Acquisition of ABC". I am guessing it uses a lot of resources to
enumerate the access before displaying the tree,
Anthony,
http://www.airdesk.co.uk




> That sure looks like it will do the job. I wonder why MS doesn't just
> include it as part of the OS.
>
> Todd
>
>> Hi Todd,
>> That's Access Based Enumeration, ABE.:
>> http://www.microsoft.com/windowsserver2003/techinfo/overview/abe.mspx
>> Anthony,
>> http://www.airdesk.co.uk
>>
>>
>>> We recently migrated from a Netware environment and are having some
>>> issues with the differences between how Netware and Windows handle file
>>> and folder permissions. We have a top level folder that everyone has
>>> access to, and subfolders with restricted permissions. In Netware, if
>>> there were 50 subfolders, but you only had access to 2 of them, when you
>>> browsed to the subfolder level, you would only see 2 folders. In
>>> Windows, even though you may not be able to open the files inside, you
>>> still see all 50 folders. Is there any way to configure permissions in
>>> Windows to get behavior more like we had in Windows?
>>>
>>
>>
>
>



Posted by Todd on April 1, 2008, 12:46 pm
Please log in for more thread options
Coming from a Netware environment where this behavior is automatic, in
certain folders, users now see 50 folders inside a folder where they might
have access to only 2 folders. So, other than potential security problems,
it affects usability. We keep fielding help desk calls about people who can
"get to everything". They don't understand that they can't actually open
everything, but they assume that if they can see it, they can open it.


> Its a good question. It is one of those things that has been the case for
> a long time. I guess it is really only a problem if you use folder names
> like "Imminent Acquisition of ABC". I am guessing it uses a lot of
> resources to enumerate the access before displaying the tree,
> Anthony,
> http://www.airdesk.co.uk
>
>
>
>
>> That sure looks like it will do the job. I wonder why MS doesn't just
>> include it as part of the OS.
>>
>> Todd
>>
>>> Hi Todd,
>>> That's Access Based Enumeration, ABE.:
>>> http://www.microsoft.com/windowsserver2003/techinfo/overview/abe.mspx
>>> Anthony,
>>> http://www.airdesk.co.uk
>>>
>>>
>>>> We recently migrated from a Netware environment and are having some
>>>> issues with the differences between how Netware and Windows handle file
>>>> and folder permissions. We have a top level folder that everyone has
>>>> access to, and subfolders with restricted permissions. In Netware, if
>>>> there were 50 subfolders, but you only had access to 2 of them, when
>>>> you browsed to the subfolder level, you would only see 2 folders. In
>>>> Windows, even though you may not be able to open the files inside, you
>>>> still see all 50 folders. Is there any way to configure permissions in
>>>> Windows to get behavior more like we had in Windows?
>>>>
>>>
>>>
>>
>>
>
>



Similar ThreadsPosted
File Access Audit on File Server June 20, 2007, 4:59 pm
"The process is unable to access the file, because the file is used by another process." October 29, 2005, 5:17 pm
Cannot access file May 31, 2007, 7:25 pm
Monitor File Access February 12, 2007, 12:09 pm
Auditing File Access January 15, 2008, 11:18 am
Audit file/folder access February 12, 2007, 10:52 am
Access denied for a particular file - nothing helps July 24, 2007, 2:18 pm
How do I monitor file access rights on Win2003? May 19, 2006, 2:20 am
How to restrict file access to Domain Computers Only August 27, 2006, 9:55 am
File Access Auditing on Exchange 2003 Server June 28, 2005, 4:01 am

Our other projects:

Art Dolls, Fairies and Mermaids - Sunnyfaces.net

Roy's Linux, Programming and Search Engines messages

1-Script XML SitemapXML Sitemap