What character should you place at the end of a share name in order to hide the share?

• Home
• Anonymous
• Sign in to post
• Post
• Explore
• Tags
• Questions
• Site feedback
• Articles
• Users

Skip to main content

• • Tags
  • Questions
  • Site feedback
  • Articles
  • Users
• Sign in to post

• Home

question

Hi Guys,

I am currently have a file server that running Windows Server 2016 Storage Server.

I have a folder that being setup as below:

Sharing_Folder
Sub_Folder1
Many_Sub_Folders2

I have shared the "Sharing_Folder" for "Everyone" with read only access. so any user could map the "Sharing Folder". Then, once users are mapped with "Sharing_Folder", they should be able to see and traverse from Sharing_folder into the "Sub_Folder1" folders as well (also read only access). These permission are inherited from "Sharing_Folder" as well. But, when come into "Many_Sub_Folder2", i would like that users that being granted access to any specific folders to see only the folder that they have access to. Meaning that though there are many "Many_Sub_Folder2", user can only see the folders that they have access to.

Currently, i tried to disable inheritance and given access to only specific users, but "Everyone" is still able to see those Sub_Folders2 even though they don't have access to.

Could you help to advise whether it is possible to achieve this scenario?

Thanks
H

windows-server

Hi,@hendriyu-7141
Hi,

 Just checking in to see if the information provided was helpful.

 If the reply helped you, please remember to accept it as an answer.
If no, please reply and tell us the current situation in order to provide further help

Best Regards,

0 Votes 0 ·

These instructions are the "End All" and correct process for doing this.

Pre-Req: Enable access-based enumeration.
1. Server Manager > File and Storage Services > Shares
2. On particular Share, right click > properties > settings > Check - Enable access-based enumeration

Secondly: Create Active Directory Group
1. Navigate to your Users folder. Below folder, create or use existing Groups OU.
2. Create new Group and name it accordingly (e.g Folder Permission - Sub_Folder1)
3. Add User to the new Group

Assign permission to Sub_Folder1 exclusively.
1. Navigate in server's explorer to Sub_Folder1 (e.g. Sharing_Folder > Sub_Folder1)
2. Right Click > Properties
3. Security > Advanced > Disable Inheritance > Convert
4. Add new Group with whatever permissions you need. Check "Replace all child..."
5. Close out of properties.

Now properly share it so Enumeration occurs dynamically.
1. Right click Sub_Folder1
2. Share with ... > Specific People
3. Choose new Group.
4. Make sure permissions for that group is correct... Either Read, or Read/Write.
5. Then Share.

Confirm
1. Now have user log out of windows and back in.
2. New path should be accessible, and only that specific path to Sub_Folder1 should be seen.
3. Full control will be allowed in Sub_Folder1 if those were the permissions you gave.

That's it!

0 Votes 0 ·

Hi，
This is what i did in my environment.
Disable the inheritance, and assign the permission on the files and folders within the shared folder depends on your requirement.

Best Regards,

You can use User Groups and assign different folders different permissions assigned to different user groups. Users in a specific User Group would have the permissions to access those directories which allow that User Group access.

Hi Timcerling,

Actually, what i want to achieve is pretty simple. I want users can only see the folders that they has access to. Meaning, though there are multiple subfolders, but they could only see the folder that they have access to. They should know the existence of others folder.

However, whatever permission i tried, users still able to see all folders even though the could not access it. But i don't want them to see it.

Please help to advise how to achieve this.

Thanks
H

0 Votes 0 ·

Hey, H

When you give access to a parent folder, the children folder of that parent are also given access to. If you want to limit the access to subfolders, you will need to revoke access from the parent folder and give only access to the subfolders. Or, remove the subfolder from the parent so it is no longer a subfolder and give access to the new file path.

-Karson

Hi,
Based on my understanding , you want to display only the files and folders that a user has permissions to access.
Access-based enumeration can be used to do this.
Windows Explorer enables access-based enumeration on shared folders by default

However, access-based enumeration is not enabled by default (can be enabled by using Share and Storage Management)on the following types of shared folders:
Shared folders that are created with Share and Storage Management, Advanced Sharing in Windows Explorer, or the net share command
Volumes
Folders or volumes that are shared for administrative purposes, such as C$ and ADMIN$
For more details and steps to do this you can refer to :
Access-based Enumeration

My test :
I created a folder and shared this folder by following way,(not advanced sharing)

Hi,

 Just checking in to see if the information provided was helpful.
Please let us know if you would like further assistance.

 Best Regards,

0 Votes 0 ·

Dear Fan Fan,

Good Day

Sorry for the late response.

Yes, you are correct. I would like to know how to display only the folders that users has the access to. meaning that specific user will only see specific folder which he/she has access. He/she should not see the rest of the folders though they are there.

Could you help to advise how to achieve this?

Your help and advise is greatly appreciated.

Many Thanks

H

0 Votes 0 ·

Dear Fan fan,

I have further queries about ABE:

I did created a root shared folder called "Shared". This root shared folder will have 3 sub folder beneath it. The three sub folder beneath are the one that going to have specific permission assigned. Meaning that user will only see the folder if he/she has access right. in other word, if he only has access right to one folder then it will only display one sub folder, He won't see the rest 2 folders.
As per your instructions, i have enabled "ABE" on the main "Shared folder". See picture below:

Then, i will give "Everyone" read only permission on the main "Shared" folder.

Then on the sub folder, i guess i will need to disable inheritance right? because i need to remove "Everyone" read only access that being inherited from main "Shared" folder to prevent he can see others folder.

iis this method correct?

Thanks

Hi，
This is what i did in my environment.
Disable the inheritance, and assign the permission on the files and folders within the shared folder depends on your requirement.

Best Regards,

Dear Fan Fan,

Good Day

Many Thanks for the advise and support.

by following your advise above, I m now confirmed that the issue has been resolved.

Many Thanks

H

question details

Related Questions

What character should you place at the end of a share name?

What is share name in Windows?