ABE on DFSR on 2k8ee does not work

Hi,

if I activate ABE on the DFS-Root with
'dfsutil property abde enable \\<namespace_root>\share'
or in
Share and Storage Management
it shows ABE activated but it does not work.
All User see all shares including such shares where they have no share-
and/or NTFS-Right.

Any idea?

--

THX,
Jens
---

Hi, Jens

We just had a discussion about the same subject a few days ago:
http://www.microsoft.com/communities...501&sloc=en-us

One of the answers is marked as helpful:

"
I was having the same problem, i could'nt find anything on the net, this is
what i came up with after several hours of searching :

1. Enable the ABE on the DFSpath

dfsutil property ABE <DFSPath>

2. Get rid of any group at the toplevel that includes users. I had my
dfsroots created on the c: drive and the users group was herited down to mys
dfs links, so the user saw every link. After deleting the users group, i
did'nt see any link.

3. You can set the right on the link with

dfsutil property ACL grant \\contoso.com\DomainNamespace1\Link1
CONTOSO\UserId:R

Read right is enough, it is just used for the ABE to have access to it,
afterwards the rigths of the linked share are taken into account

After this it seems to work

"

Hope it helps,
Malu

--
-----------
This post is provided "AS IS" with no warranties, and confer no rights. Use
of included code samples are subject to the terms specified at Microsoft -
Information on Terms of Use.


"Jens Klein" wrote:

> Hi,
>
> if I activate ABE on the DFS-Root with
> 'dfsutil property abde enable \\<namespace_root>\share'
> or in
> Share and Storage Management
> it shows ABE activated but it does not work.
> All User see all shares including such shares where they have no share-
> and/or NTFS-Right.
>
> Any idea?
>
> --
>
> THX,
> Jens
> ---
>
>

Also a forum thread on this..
http://social.technet.microsoft.com/...e-0b862ff53e5c

--
-----------
This post is provided "AS IS" with no warranties, and confer no rights. Use
of included code samples are subject to the terms specified at Microsoft -
Information on Terms of Use.


"Jens Klein" wrote:

> Hi,
>
> if I activate ABE on the DFS-Root with
> 'dfsutil property abde enable \\<namespace_root>\share'
> or in
> Share and Storage Management
> it shows ABE activated but it does not work.
> All User see all shares including such shares where they have no share-
> and/or NTFS-Right.
>
> Any idea?
>
> --
>
> THX,
> Jens
> ---
>
>