You may need to rebuild the shares if this wasn't set up from the get go as I don't believe you can turn it on/off on the fly. This will check what folders on the server the user has access to and only show them the ones that they should be able to get into. For other shares in the domain you would set up something like Share Permissions - Everyone | Full Control \\Server\SharedFolder NTFS Permissions - Group that should have access to this share | Modify (Or whatever you want).ĭuring the creation of the file share you can turn on Access Based Enumeration (ABE) as rthonpm mentioned. By default the admin shares (\\Servername\c$ for example) are only accessible or viewable by domain admins. Generally you can set Share permissions as Everyone - Full Control and utilize NTFS permissions to provide the structure for the file system. Share permissions which are usually left more permissive as a best practice, and NTFS permissions which are the more toothy permission set. There are really two levels of permissions to worry about here.
