Windows Server 2003 Access-based Enumeration in a DFS environment

Discussion in 'File Systems' started by Nick, Jul 23, 2009.

  1. Nick

    Nick Guest

    We have Windows Server 2003 Access Based Enumeration in a DFS environment.

    How or where do you go to set the ACL on DFS links as users are able to
    browse other DFS shares.

    We have many DFS links exist under the root and currenly if they go
    to:\\OurDomain.com\ they are able to see:
    ACCOUNTS
    HR
    NETLOGON
    SALES
    SYSVOL

    When the users enumerate the root, we want them to only see their
    directories
    \\OurDomain.com\DFS_Share\Accounts

    Many Thanks
     
    Nick, Jul 23, 2009
    #1
    1. Advertisements

  2. Nick

    DaveMills Guest

    I think you will find that the permission to access the files and folders on the
    target are to be set on the target (share or NTFS). The permission to enumerate
    the links (rather than the targets) are set in the NTFS permission of the link
    folders in the DFSRoot.
     
    DaveMills, Jul 23, 2009
    #2
    1. Advertisements

Ask a Question

Want to reply to this thread or ask your own question?

You'll need to choose a username for the site, which only take a couple of moments (here). After that, you can post your question and our members will help you out.