Els's blog

Monday, May 29, 2006


Last week, someone asked me if it was possible to show only the folders that users actually have permissions on in Windows.
This is a comment most Novell people have as well, since Novell automatically only shows folders that you can access.
And you must admit that it is annoying to see an entire list of directories, but when you click on them, you receive "Access Denied" over and over again.

Well the solution came with SP1 of Windows Server 2003. One of the features listed is called Access-based Enumeration.
There is not much to explain, by enabling Access-based enumeration, users will only see those folders they have permissions on. Simple.

The only problem is that SP1 doesn't really provide an interface to enable this feature, only the API is available.
Luckily for us, in the mean time Microsoft has made both a graphical and a commandline tool available for Abde. You can download these tools here: http://www.microsoft.com/downloads/details.aspx?FamilyId=04A563D9-78D9-4342-A485-B030AC442084&displaylang=en

So from now on, you can make sure that a user will only see the folders he/she actually has access to!


Post a Comment

<< Home