Access-based Enumeration not working

[Li]

We have all the users set as local administrators. After I installed
Access-based enumeration, the users should only see the shared folders
that have been assigned to. But for some reason, they are still able to
see all the shared folders.

Any suggestion will be greatly appreciated!

[Hayman Ezzeldin]

Dear Li,
Does any of your configurations meet any of the following?
1- Users who are administrators will be able to see every file and folder in
a share even with ABE enabled and even when they have Deny ACE on these
items.
2- ABE does not apply to users who can log on interactively to the server,
regardless of whether they are administrators or not. This means ABE isn't
really suitable for Terminal Services environments.
3- You can't configure ABE so that a newly created share is automatically
ABE-enabled.

Please let me know
Best regards.

Post by Li
We have all the users set as local administrators. After I installed
Access-based enumeration, the users should only see the shared folders
that have been assigned to. But for some reason, they are still able to
see all the shared folders.
Any suggestion will be greatly appreciated!

[Li]

Post by Hayman Ezzeldin
Dear Li,
Does any of your configurations meet any of the following?
1- Users who are administrators will be able to see every file and folder in
a share even with ABE enabled and even when they have Deny ACE on these
items.
2- ABE does not apply to users who can log on interactively to the server,
regardless of whether they are administrators or not. This means ABE isn't
really suitable for Terminal Services environments.
3- You can't configure ABE so that a newly created share is automatically
ABE-enabled.
Please let me know
Best regards.

Post by Li
We have all the users set as local administrators. After I installed
Access-based enumeration, the users should only see the shared folders
that have been assigned to. But for some reason, they are still able to
see all the shared folders.
Any suggestion will be greatly appreciated!

I appreciate your response. Does No.1 in your response refer to
administrators in domain or local administrators? Please clarify it.
Every users in our environment is set to be local administrator. If your
answer is local administrator, is there any workaround? Please advise!

Thank you very much!

[Hayman Ezzeldin]

Dear Li,
It's any Administrator; local or domain.
I'm sorry, but I don't know a workaround for that, because in my opinion you
can't limit an Administrator from accessing something he can take ownership
of.

Post by Li

Post by Hayman Ezzeldin
Dear Li,
Does any of your configurations meet any of the following?
1- Users who are administrators will be able to see every file and folder
in a share even with ABE enabled and even when they have Deny ACE on
these items.
2- ABE does not apply to users who can log on interactively to the
server, regardless of whether they are administrators or not. This means
ABE isn't really suitable for Terminal Services environments.
3- You can't configure ABE so that a newly created share is automatically
ABE-enabled.
Please let me know
Best regards.

Post by Li
We have all the users set as local administrators. After I installed
Access-based enumeration, the users should only see the shared folders
that have been assigned to. But for some reason, they are still able to
see all the shared folders.
Any suggestion will be greatly appreciated!

I appreciate your response. Does No.1 in your response refer to
administrators in domain or local administrators? Please clarify it. Every
users in our environment is set to be local administrator. If your answer
is local administrator, is there any workaround? Please advise!
Thank you very much!