Windows Server 2003 Access-based Enumeration in a DFS environment

We have Windows Server 2003 Access Based Enumeration in a DFS environment.

How or where do you go to set the ACL on DFS links as users are able to
browse other DFS shares.

We have many DFS links exist under the root and currenly if they go
to:\\OurDomain.com\ they are able to see:
ACCOUNTS
HR
NETLOGON
SALES
SYSVOL

When the users enumerate the root, we want them to only see their
directories
\\OurDomain.com\DFS_Share\Accounts

Many Thanks

I think you will find that the permission to access the files and folders on the
target are to be set on the target (share or NTFS). The permission to enumerate
the links (rather than the targets) are set in the NTFS permission of the link
folders in the DFSRoot.

On Thu, 23 Jul 2009 16:10:47 +0100, "Nick" <> wrote:

>We have Windows Server 2003 Access Based Enumeration in a DFS environment.
>
>How or where do you go to set the ACL on DFS links as users are able to
>browse other DFS shares.
>
>We have many DFS links exist under the root and currenly if they go
>to:\\OurDomain.com\ they are able to see:
>ACCOUNTS
>HR
>NETLOGON
>SALES
>SYSVOL
>
>When the users enumerate the root, we want them to only see their
>directories
>\\OurDomain.com\DFS_Share\Accounts
>
>Many Thanks
>
>
>
>
>
>
>
>
>
>
--
Dave Mills
There are 10 types of people, those that understand binary and those that don't.