VNX 5100 / Windows 2012 Access Based Enumeration

Question

Hello,

I have a new Windows 2012 R2 File Server cluster utilizing a VNX 5100 array. I understand EMCABE is needed to enabled Access Based Enumeration but most information I see does not mention Windows. I have setup ABE before and we use it company wide with Windows and Celerra (CIFS). Even though I have enabled ABE on my Windows 2012 server shares (very simple), it is not working. Do I also have to enabled ABE on the VNX using the EMCABE utility?

thank you!

dynamox · Accepted Answer

yes, you need to enable ABE using emcabe. No impact to the share. I assume you understand what ABE does ? Today users who are not permitted to see a folder will get access denied, once you enable ABE on VNX they will not see that folder(s) period.

j-mo1 · Answer

Sorry for posting in the wrong section. I did not see 5100 available.

So to confirm, I do have to enabled ABE on the 5100 using EMCABE? The server is already done.

Is there any impact to enabling this? This is currently in production.

thanks

dynamox · Answer

ABE is enabled on the file server that is hosting the shares. On VNX5100 (but the way you posted in VNXe section), you will use emcabe utility to enable ABE on the share. There is nothing that needs to be done on the client.

j-mo1 · Answer

We are using ABE with MS DFS. The root folder is shared only - with sub-folders using NTFS permissions.  The sub-folders are published with DFS links.  thanks

dynamox · Answer

ABE on VNX does not hide shares, it hides folders that customer does not have access to.

j-mo1 · Answer

Thanks and yes I do understand.  We currently use it throughout the company and I just rolled out a new File Server at one office.  They are frustrated b/c ABE is not working and they see all company shares.

VNX

VNX 5100 / Windows 2012 Access Based Enumeration

Was this post helpful?