It is mission critical because ABE hides any folders a user does not have permission to access no matter what method they use to access the file sharing server.
Out of sight, out of mind ... to a degree. ;)
Now, for some of our clients, and for ourselves, we are migrating our file servers to Windows Server 2008 Standard x64 Server Core installations. Performance improvements over Win2K3 Standard GUI install for older hardware with a hard drive refresh is impressive.
Running the install is pretty straight forward:
As we are running through the install routine, something to keep in mind: We have no direct GUI on the Server Core box to bring up the folder's properties and manually enable ABE:
Access Based Enumeration Install on Server Core
As a result, when we are running through the ABE install on Server Core, we need to do the following:
Win2K3 Full - ABE Folder Properties
ABE Installation - Enable Access-based Enumeration by default
Once the ABE install is complete, create your file shares, set permissions either via the command line on the Server Core box, another Win2K8 box, or via RSAT enabled Vista SP1.
More on ABE:
- Windows Server 2003 Access-based Enumeration (download page for Word doc)
- Access-based Enumeration on TechNet
- TechNet Magazine: Utility Spotlight: Access-based Enumeration
Note that SBS 2008 has ABE installed by default with permissions managed from within the SBS 2008 consoles!
Server Core Rocks! :D
Microsoft Small Business Specialists
*All Mac on SBS posts are posted on our in-house iMac via the Safari Web browser.