I have a Windows Server 2012 file server hosting home directories for a large number of users.
Even though I have a NTFS access lists preventing users from accessing other users folders, I don’t really want users from even being able to see each other top level folders.
Enter Access Based Enumeration. Easy to enable and gives everyone that nice warm fuzzy feeling that everything is even more secure than it was before.
1. Open Server Manager.
2. Click on File and Storage Services.
3. Choose Shares from the left hand menu.
4. Pick a share, right click and choose properties from the context menu.
5. Check the box for “Enable access-based enumeration”.
Hey presto, job done.
Onwards and upwards…..