Windows 10: ABE (access based enumeration) on a Windows 10 Share?

Does anyone know if its possible to enable ABE (Access Based Enumeration) on a Windows 10 (Enterprise) share?

thanks...

submitted by /u/Prog44
[link] [comments]

:)

 

Access Based Enumeration on Windows Server 2016 Essentials does not hide folders in shared folders

Hello Everyone.

I've just installed Windows Server 2016 Essentials for our home office, and currently playing around with it before deploying in real office.

I enabled the Access Based Enumeration (ABE) to hide the folders in Shared Folders so the staffs here only see the folders they have access to.

However all the folders still appear there, even though they don't have access to it. True though they cannot open the folders, just to avoid confusion with lots of folders they don't have access to.

I checked on effective access on each folders, it shows that normal users does not have access ion "List folders/ read data".

Just wondering if anyone have solution to this.

Thank you in advance.

 

Windows 10 Tweaks

Pressing “Windows+Pause Break” (it’s up there next to scroll lock) opens the “System” Window.

Windows 10: In the new version of Windows, Explorer has a section called Quick Access. This includes your frequent folders and recent files. Explorer defaults to opening this page when you open a new window. If you’d rather open the usual This PC, with links to your drives and library folders, follow these steps:

• Open a new Explorer window.
• Click View in the ribbon.
• Click Options.
• Under General, next to “Open File Explorer to:” choose “This PC.”
• Click OK

credit to Lifehacker.

 

Cannot access shared network drive


Personally, I wouldnt use Everyone. If anyone hacks into you, they have full access to everything and can demolish everything on your raid. I would rather set up accounts and access separately for each person. That way, I know who did all that damage. In the end with a little extra work, I feel more secure by using Authenticated Users.


If this helps.
step 1 create non-microsoft account and without email and address without admin rights
step 2 share a drive or folder to specific user account (if Everyone is listed, remove it)
step 3 set security > add Authenticated Users (if more than 1 account) or add specific users
step 3a remove Everyone from list
step 3b uncheck full control and write for all items listed except SYSTEM and Admin account.
step 4 right click Start > Computer Management > System Tools > Shared Folders > Shares ... to verify settings and change anything else. You can also see the number of connections to each share here.