Access based directory enumeration


Using this as a notepad or bookmark so I dont lose track of this feature:


http://www.projecthurricane.com/ITPro/ABDE.wmv


http://weblogs.asp.net/jhoward/archive/2005/02/11/371080.aspx


The specific API is NetShareSetInfo, and specifically setting a flag to enable ABDE that points to a SHARE_INFO_1005 structure. The flag value for Access Based Directory Enumeration is #define SHI1005_FLAGS_ENFORCE_NAMESPACE_ACCESS 0x0800.”


http://www.blogtelevision.net/p/Read-Entry-___1,4,,11327.html


spat


[added on March 24th]


http://blogs.msdn.com/windowsserver/archive/2005/03/24/401840.aspx


SP1 and x64 address these concerns by making inacessible files and folders invisible to users through a neat little feature called Access-Based Enumeration (ABE).  ABE in SP1/x64 can be used with the command-line (abetool.exe) and through a fairly robust API (NetShareSetInfo).  FYI – There is a GUI on the way.


Command Line Sytax:  abetool [ShareName] [1=on/0=off] [ServerName]


Command Line Example: abetool “Personal Folders” 1 FileSrvr1


 


 


Added May 17 2005:


http://download.microsoft.com/download/4/9/8/498EEEEF-97B0-450E-8E56-26105D4B092E/Accessbasedenum.doc


http://www.microsoft.com/downloads/details.aspx?FamilyID=04a563d9-78d9-4342-a485-b030ac442084&displaylang=en


 

Comments (0)