First published on TechNet on Jan 25, 2011
Hello,
Dave
here. Today I discuss the Access Based Enumeration (ABE) feature in Windows Server and how it may be i...
Updated Apr 04, 2019
Version 2.0
Blog Post
I realize I'm commenting on an old article, but...
Just started having an issue with one user at one site and this seems to be the most likely issue.
User at site B gets mapped via GPO to a DFS (Windows 2000 mode) Namespace share with primary target on a server (2008 R2) at site B. Two other servers (2012 R2) are also members of the target, but for read-only access in the event the local server is down. Data is replicated using DFS-R from the site B server to the other two servers in our corporate data centers so we can backup the data to our enterprise backup.
Via the mapped drive the user can only see one of 30 subfolders in the share. Connecting to the UNC path for the site B server and the two HQ servers, the user can see all of the folders and files as expected. All other users at site B report normal operation and all files and folders available. Compared working and non-working users group membership's and there are no differences. No recent password changes or recorded login errors.
Via Server Manager on the site B server, ABE is not enabled for the share. Attempts to check ABE via DFSUTIL fail with an error that checking it is unsupported.
Any ideas or suggestions would be greatly appreciated
Any ideas