Hiding files/folder shares from users
-
@joel said in Hiding files/folder shares from users:
I did follow the guide exactly and im still able to see the folders i dont want to see
I'm sure its something simple!you willing to show us a snip of your folder structure? and a snip of the NTFS permissions of the top few folders?
-
I've just deleted everything so my E:\ directory so it's now empty...Willing to start right from the top...
Step1 - Create a folder called SHARED (E:\Shared) and then under properties > Share > Advanced sharing, will call it 'Shared' and give Everyone Full control.
Step2 - I'll then go to security tab > advanced and disable inheritance (converting to explicit objects) and then remove the local users accounts
Step3 - Whilst in advanced security, I'll add in a new principle (Domain Users) to 'this folder only' and apply advanced permissions (list folder/read data)
So far so good? Whats next as i think i go wrong from here!
Step 4 - Create the sub folders under E:\Shared
ie. E:\Shared\Folder1
E:\Shared\Folder2
E:\Shared\Folder3Note: I've created my security groups and put the relevant users in them already so they are on standby.
What permissions can/should I apply to each sub folder?
-
Let's assume you create a group called Folder1 and you want them to have full control.
You need to set the Security settings to Full Control to Folder 1 group and nothing else should be listed.
-
Thats precisely what i've done but yet I can still see Folder 2 (although dont have permissions to open it) it's still visible though!
-
@joel said in Hiding files/folder shares from users:
Thats precisely what i've done but yet I can still see Folder 2 (although dont have permissions to open it) it's still visible though!
I'd say that ABE isn't working or enabled then.
-
@joel said in Hiding files/folder shares from users:
Thats precisely what i've done but yet I can still see Folder 2 (although dont have permissions to open it) it's still visible though!
Are you viewing the share from your account or different account?
-
I just checked this on my own server (I didn't have ABE enabled, I clicked box and poof, one folder on my share I don't have any permissions for vanished).
-
@joel said in Hiding files/folder shares from users:
Thats precisely what i've done but yet I can still see Folder 2 (although dont have permissions to open it) it's still visible though!
OHH and you need to be looking through the share connection, not through the folder structure on the server itself (made that mistake before too).
The folder structure will also ways show you (well, almost always).
-
@dashrender said in Hiding files/folder shares from users:
@joel said in Hiding files/folder shares from users:
Thats precisely what i've done but yet I can still see Folder 2 (although dont have permissions to open it) it's still visible though!
OHH and you need to be looking through the share connection, not through the folder structure on the server itself (made that mistake before too).
The folder structure will also ways show you (well, almost always).
THATS WHERE THE PROBLEM IS!!! if ii browse to \SERVER\Shared I can only see the folder I want!
However, i'm actually using a remote app (excel) and when I go to File>Open>E:\Shared, I can see the folder!
-
@joel said in Hiding files/folder shares from users:
@dashrender said in Hiding files/folder shares from users:
@joel said in Hiding files/folder shares from users:
Thats precisely what i've done but yet I can still see Folder 2 (although dont have permissions to open it) it's still visible though!
OHH and you need to be looking through the share connection, not through the folder structure on the server itself (made that mistake before too).
The folder structure will also ways show you (well, almost always).
THATS WHERE THE PROBLEM IS!!! if ii browse to \SERVER\Shared I can only see the folder I want!
However, i'm actually using a remote app (excel) and when I go to File>Open>E:\Shared, I can see the folder!
Have you tried reopening excel and then go to E:\Shared to see if the folder is not there?
-
Yes, it is 100% visible. I've even logged onto the server via RDP and can see the folder there. However, it ISNT there when I browse to \Server\Shared. Of course I dont want to see the folder in any case as I dont have permission to it! I only want to see the folders I do have access to!
-
@joel said in Hiding files/folder shares from users:
Yes, it is 100% visible. I've even logged onto the server via RDP and can see the folder there. However, it ISNT there when I browse to \Server\Shared. Of course I dont want to see the folder in any case as I dont have permission to it! I only want to see the folders I do have access to!
Try rebooting - not that I needed to. I just checked on my missing folder (research folder in my case) and it's still not listed when I browser through Excel.
-
@joel said in Hiding files/folder shares from users:
Yes, it is 100% visible. I've even logged onto the server via RDP and can see the folder there. However, it ISNT there when I browse to \Server\Shared. Of course I dont want to see the folder in any case as I dont have permission to it! I only want to see the folders I do have access to!
I'm not sure it possible to hide folders if you have access to it locally.
-
Where are you launching Excel from? Inside the RDP session? if yes, it will suffer the same issue as local browsing, unless you specifically tell Excel to look at \\server\share\ etc.
-
@black3dynamite said in Hiding files/folder shares from users:
@joel said in Hiding files/folder shares from users:
Yes, it is 100% visible. I've even logged onto the server via RDP and can see the folder there. However, it ISNT there when I browse to \Server\Shared. Of course I dont want to see the folder in any case as I dont have permission to it! I only want to see the folders I do have access to!
I'm not sure it possible to hide folders if you have access to it locally.
Sure you can, as long as you look for those folders through the filter - in this case, through the SMB share.
I'm guessing he's having the same problem he was having before - Excel is going to to the local drive, not the mapped network share.
What makes this more complicated is if the data is on the same machine he's actually on. i.e. local drive E:\share is mapped to network drive s:\
You'll need Excel to look through S:\ not E:\ to see the filtering
-
Access based enumeration is a function of the SMB share. If that's not in the loop, it can't work.
-
The E:\ isnt on my local laptop. It's on a hosted server along with Excel which is setup as a remote app.
We have a VPN to the server so from my local laptop, I can use SMB path \Server\shared\ and am able to see the folder I need (Folder1)
However if I launch Excel (remote app) its looking locally on the server so if I browse to E:\Shared - I am able to see Folder1 and Folder2 (although permission denied to Folder2) but I DONT want to see it there in the 1st place!
-
@joel said in Hiding files/folder shares from users:
The E:\ isnt on my local laptop. It's on a hosted server along with Excel which is setup as a remote app.
We have a VPN to the server so from my local laptop, I can use SMB path \Server\shared\ and am able to see the folder I need (Folder1)
However if I launch Excel (remote app) its looking locally on the server so if I browse to E:\Shared - I am able to see Folder1 and Folder2 (although permission denied to Folder2) but I DONT want to see it there in the 1st place!
This is exactly as I said.
But first let me confirm something - Is Excel on the same machine as the files are saved on?
-
@dashrender said in Hiding files/folder shares from users:
@joel said in Hiding files/folder shares from users:
The E:\ isnt on my local laptop. It's on a hosted server along with Excel which is setup as a remote app.
We have a VPN to the server so from my local laptop, I can use SMB path \Server\shared\ and am able to see the folder I need (Folder1)
However if I launch Excel (remote app) its looking locally on the server so if I browse to E:\Shared - I am able to see Folder1 and Folder2 (although permission denied to Folder2) but I DONT want to see it there in the 1st place!
This is exactly as I said.
But first let me confirm something - Is Excel on the same machine as the files are saved on?
yes they are
-
@joel said in Hiding files/folder shares from users:
@dashrender said in Hiding files/folder shares from users:
@joel said in Hiding files/folder shares from users:
The E:\ isnt on my local laptop. It's on a hosted server along with Excel which is setup as a remote app.
We have a VPN to the server so from my local laptop, I can use SMB path \Server\shared\ and am able to see the folder I need (Folder1)
However if I launch Excel (remote app) its looking locally on the server so if I browse to E:\Shared - I am able to see Folder1 and Folder2 (although permission denied to Folder2) but I DONT want to see it there in the 1st place!
This is exactly as I said.
But first let me confirm something - Is Excel on the same machine as the files are saved on?
yes they are
And E: on that server is the local drive with the files?
