How can I enable access-based share enumeration so that users see only files and folders to which they have access?

A. Novell Netware has long had the ability to limit users so that they see only files and folders to which they have access, thus saving a lot of confusion. You can gain this capability, called Access-based Enumeration, in Windows Server 2003 Service Pack 1 (SP1) and later by installing a small GUI application that you download at http://www.microsoft.com/downloads/details.aspx?FamilyID=04A563D9-78D9-4342-A485-B030AC442084&displaylang=en. Install the program on each Windows 2003 SP1 server that you want to have Access-based Enumeration-enabled shares. To do so, execute the downloaded file to begin the installation, then perform these steps:

The installation adds a graphical supplement to the standard properties of a share and copies a command tool (abecmd.exe) and a whitepaper to the system.

At the most basic level, you can enable Access-based Enumeration by right-clicking the folder being shared and select Properties. A new tab is available, "Access-based Enumeration," which lets you configure the functionality, as the figure shows.After you enable the functionality, users will see only files and folders they can access. The figure shows an example of a user's folders before enabling Access-based Enumeration. This figure shows the folder display after enabling Access-based Enumeration.