Windows Server 2003 Access-based Enumeration in a DFS environment

[Nick]

We have Windows Server 2003 Access Based Enumeration in a DFS environment.

How or where do you go to set the ACL on DFS links as users are able to
browse other DFS shares.

We have many DFS links exist under the root and currenly if they go
to:\\OurDomain.com\ they are able to see:
ACCOUNTS
HR
NETLOGON
SALES
SYSVOL

When the users enumerate the root, we want them to only see their
directories
\\OurDomain.com\DFS_Share\Accounts

Many Thanks

[DaveMills]

I think you will find that the permission to access the files and folders on the
target are to be set on the target (share or NTFS). The permission to enumerate
the links (rather than the targets) are set in the NTFS permission of the link
folders in the DFSRoot.

Post by Nick
We have Windows Server 2003 Access Based Enumeration in a DFS environment.
How or where do you go to set the ACL on DFS links as users are able to
browse other DFS shares.
We have many DFS links exist under the root and currenly if they go
ACCOUNTS
HR
NETLOGON
SALES
SYSVOL
When the users enumerate the root, we want them to only see their
directories
\\OurDomain.com\DFS_Share\Accounts
Many Thanks