Access-based enumeration in Windows Server 2012

Yesterday I migrated our main file server to Windows Server 2012.
After setting up the permissions I noticed that Access-based enumeration was not working.

In this environment I’m not running DFS since there is only one File server.
I could not initially find the Access-based enumeration setting, or any good information on the web.

First you need to add the File And Storage Services role to the server and reboot the server.
Then go to File And Storage Services in System Manager.

Press Shares, select your shared folder, right-click and press Properties.

Under Settings you will find the Enable access-based enumeration-setting.
Enable it and Apply your changes.

If this helped you let me know! :)

12 Comments

  1. This definitely helped me – I am trying to revise my lab projects for 2012, and no Share and Storage Management (except under Remote Access Tools) so I was lost on how to do it!!! This really helped.

    Reply
  2. This totally helped. Strange that this is enabled by default on 2K8 but not 2012.
    Thanks alot.

    Reply
  3. Thanks! Couldn't find this and it was driving me nuts.

    Reply
  4. Joakim

    Glad I could help!
    / J

    Reply
    • Hi Joakim,

      I have followed the directions above.

      but a user account that I am testing this with still sees the shares.

      what would you suggest

      Reply
      • Joakim

        Hi Greg,
        Have you verified via Effective Permissions that the user(s) do not have permissions to the folder?

        / Joakim

  5. ABE does not hide the share only the files and folders to which the user has no access i.e. at least read (NTFS) cheers

    Reply
  6. Thanks for sharing this. Very helpful as I'm setting up a RDS server with roaming profiles for users and couldn't find this option on the 2012 server.

    Reply
  7. Perfect, this is what I was looking for! Thank you Joakim!

    Reply
  8. I'm migrating from a Novell system to Windows/AD, and don't yet know where all the nooks and crannies are that MS hid their settings. Like you said, there's not much info on this out on the Internet, so your post here is very helpful. So thanks a bunch.

    Reply
    • Joakim

      Hey DarkLurker,

      Welcome to the Microsoft-universe! If you need help or find other interesting articles that relate to what we write about please let us know.

      Best regards,
      Joakim.

      Reply
  9. Hi Joakim – I'm having the same issue, used your suggestion, and users can still see folders they don't have access to. Do you know whether this works with users coming in through remote desktop?

    Reply

Submit a Comment

Your email address will not be published.

*

You may use these HTML tags and attributes: <a href="" title=""> <abbr title=""> <acronym title=""> <b> <blockquote cite=""> <cite> <code> <del datetime=""> <em> <i> <q cite=""> <strike> <strong>