-----Original Message-----
From: Ziots, Edward [mailto:[email protected]] 
Sent: Tuesday, 10 August 2010 9:34 PM
To: NT System Admin Issues
Subject: RE: File server structure and perms

> Have you had experience is Access Based Enumeration? You can setup one master 
> share, and unless you have NTFS permissions of read to the directory 
> underneath, the user doesn't even see the directory, which means they 
> wouldn't be able to read/write from it, and should solve the problem. 

Just because someone can't see a directory doesn't mean they can't read/write 
from it - they just need to know that the folder is there. Only appropriate 
NTFS permissions stop this, which means that ABE or no, the NTFS permissions 
have to be setup correctly.

This is one reason why Microsoft didn't introduce ABE for a long time - it adds 
next to nothing from a security perspective. It just stops inquisitive users 
attempting to poke around.

Cheers
Ken


~ Finally, powerful endpoint security that ISN'T a resource hog! ~
~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/>  ~

Reply via email to