A. Novell Netware has long had the ability to limit users so that they see only files and folders to which they have access, thus saving a lot of confusion. You can gain this capability, called Access-based Enumeration, in Windows Server 2003 Service Pack 1 (SP1) and later by installing a small GUI application that you download at http://www.microsoft.com/downloads/details.aspx?FamilyID=04A563D9-78D9-4342-A485-B030AC442084&displaylang=en. Install the program on each Windows 2003 SP1 server that you want to have Access-based Enumeration-enabled shares. To do so, execute the downloaded file to begin the installation, then perform these steps:
- Click Next to the welcome screen.
- Select "I agree" to the license agreement and click Next.
- Select an installation folder and click Next.
- You now select whether to either enable Access-based Enumeration on all shares on the server or manually enable it on shares, as the figure shows. Click Next.
- Click Next to start the file copy, then click Close.
The installation adds a graphical supplement to the standard properties of a share and copies a command tool (abecmd.exe) and a whitepaper to the system.
At the most basic level, you can enable Access-based Enumeration by right-clicking the folder being shared and select Properties. A new tab is available, "Access-based Enumeration," which lets you configure the functionality, as the figure shows. After you enable the functionality, users will see only files and folders they can access. The figure shows an example of a user's folders before enabling Access-based Enumeration. This figure shows the folder display after enabling Access-based Enumeration.