today i was messing around with trying to mimic access based enumeration (ABE) permissions on a non-windows NAS unit. i can get close but not exact…

first create a security group for the root folder share with List folder contents permission only and most importantly apply to This folder only. this prevents the list folder permissions from being inherited on subfolders.

now on the subfolders give individual users full read or write permissions as needed. users will still be able to see other user’s folders (unlike with ABE), but they will get access denied when trying to browse the contents. i imagine the only way to mimic ABE exactly would be to mess around with Deny permissions and that’s a road i don’t want to go down.

update 10/9/2013:
in a recent issue of power solutions magazine it was stated that an upcoming firmware release will add ABE and SMBv2…so this becomes somewhat of a moot point.

Comments are closed.