with Service Pack 1 for Windows Server 2003, a new feature called Access-Based Enumeration (ABE) has been added to how file sharing works on Windows platforms. By installing and enabling ABE on a Windows Server 2003 SP1 or R2 file server, users on Windows XP desktops will only be able to see files and folders if they actually have permission to access them. I recently wrote an article for Windows Networking.com that explains how to implement this feature and lists a few gotchas you need to be aware of.
Trouble is, ABE only works if your network shares are on an ABE-enabled Windows Server 2003 SP1 or R2 machine. What if you allow some of the "power users" in your company to share folders on their own Windows XP desktop computers? In that case, you're out of luck as ABE can't be enabled on XP. With Windows Vista however, this has now changed -- Vista has ABE built right into it, and this means that when a user shares a folder on her machine and other users browse that share over the network, they will only see files and folders that they have permissions to access.
Note however that ABE only works if Vista users share their files or folders from within their user profile. Yes that's right, I said files -- in Vista you can share individual files provided you do so from within your user profile. For example, if user Jane Doe shares the file EndOfQuarterPresentation.ppt from within her Documents folder on her computer desk22.mtit.com, then other users to whom she has granted permissions will be able to view and access this file over the network by using the path \\desk22.mtit.com\Users\JaneDoe\Documents\EndOfQuarterPresentation.ppt.
For Detail visit: http://www.itworld.com/nls_windows_tullochvista060925
Trouble is, ABE only works if your network shares are on an ABE-enabled Windows Server 2003 SP1 or R2 machine. What if you allow some of the "power users" in your company to share folders on their own Windows XP desktop computers? In that case, you're out of luck as ABE can't be enabled on XP. With Windows Vista however, this has now changed -- Vista has ABE built right into it, and this means that when a user shares a folder on her machine and other users browse that share over the network, they will only see files and folders that they have permissions to access.
Note however that ABE only works if Vista users share their files or folders from within their user profile. Yes that's right, I said files -- in Vista you can share individual files provided you do so from within your user profile. For example, if user Jane Doe shares the file EndOfQuarterPresentation.ppt from within her Documents folder on her computer desk22.mtit.com, then other users to whom she has granted permissions will be able to view and access this file over the network by using the path \\desk22.mtit.com\Users\JaneDoe\Documents\EndOfQuarterPresentation.ppt.
For Detail visit: http://www.itworld.com/nls_windows_tullochvista060925
0 comments:
Post a Comment