Access BAsed Enumeration Question-Observation

Server 2008 ent.

Servername = Bill
Share = Drive ABE turned on
Underneath the share 3 folders A,B,C

Underneath each letter a number 1,2,3

so a path to the server would look like this example



\\bill\drive\A\1

As a user i have access to folder A and folders 1-3 underneath

if i give a user perms to folder 2 under folder B i see nothing within my
computer.

but i can map a drive to \\bill\drive\B\2

I dont have any perms on B just on the 2 folder, If ABE is suppose to be
like Netware why dont i see folder B durning the browse.

Hope this makes sense.

 

On Wed, 27 May 2009 11:32:13 -0500, "Bob Dorn" <dornr@matc.edu> wrote:

>Server 2008 ent.
>
>Servername = Bill
>Share = Drive ABE turned on
>Underneath the share 3 folders A,B,C
>
>Underneath each letter a number 1,2,3
>
>so a path to the server would look like this example
>
>
>
>\\bill\drive\A\1
>
>As a user i have access to folder A and folders 1-3 underneath
>
>if i give a user perms to folder 2 under folder B i see nothing within my
>computer.
>
>but i can map a drive to \\bill\drive\B\2
>
>I dont have any perms on B just on the 2 folder, If ABE is suppose to be
>like Netware why dont i see folder B durning the browse.
>
>Hope this makes sense.
>

Not completely but I think your problem has nothing to do with ABE. By default
Windows does not check the access on the folders in the path to a file when it
is opened. See Bypass Traverse Checking Right
http://support.microsoft.com/kb/277644

This right allow you to open the destination file even though you cannot read
the folders in the path. Some application like Word will always try to read the
folders themselves before opening the file so fail to open the file if you
cannot read the folder path even with the Bypass right enabled.
--
Dave Mills
There are 10 types of people, those that understand binary and those that don't.

 

Ive even tryed to enable Bypass traverse checking per ms article
cc739389..no luck
"Bob Dorn" <dornr@matc.edu> wrote in message
news:969A8BC5-9332-4E1A-80B0-91F158D68B11@microsoft.com...
> Server 2008 ent.
>
> Servername = Bill
> Share = Drive ABE turned on
> Underneath the share 3 folders A,B,C
>
> Underneath each letter a number 1,2,3
>
> so a path to the server would look like this example
>
>
>
> \\bill\drive\A\1
>
> As a user i have access to folder A and folders 1-3 underneath
>
> if i give a user perms to folder 2 under folder B i see nothing within my
> computer.
>
> but i can map a drive to \\bill\drive\B\2
>
> I dont have any perms on B just on the 2 folder, If ABE is suppose to be
> like Netware why dont i see folder B durning the browse.
>
> Hope this makes sense.
>
>

 

Rats answered my own question with cc739389

Bypass traverse checking:

This user right determines which users can traverse directory trees even
though the user may not have permissions on the traversed directory. Thise
privilege does NOT allow the user to list the contents of a directory, only
to traverse directories.

This is why I can map to the folder directory but CANT browse to it.

"Bob Dorn" <dornr@matc.edu> wrote in message
news:969A8BC5-9332-4E1A-80B0-91F158D68B11@microsoft.com...
> Server 2008 ent.
>
> Servername = Bill
> Share = Drive ABE turned on
> Underneath the share 3 folders A,B,C
>
> Underneath each letter a number 1,2,3
>
> so a path to the server would look like this example
>
>
>
> \\bill\drive\A\1
>
> As a user i have access to folder A and folders 1-3 underneath
>
> if i give a user perms to folder 2 under folder B i see nothing within my
> computer.
>
> but i can map a drive to \\bill\drive\B\2
>
> I dont have any perms on B just on the 2 folder, If ABE is suppose to be
> like Netware why dont i see folder B durning the browse.
>
> Hope this makes sense.
>
>