Lenovo DM series
什么是ABE(access-based-enumeration)?
“基于訪問的枚舉僅顯示用戶有權(quán)訪問的文件和文件夾。如果用戶沒有文件夾的“讀取”(或等效)權(quán)限,則Windows將從用戶視圖中隱藏該文件夾。僅當(dāng)查看共享文件夾中的文件和文件夾時(shí),此功能才有效。在查看本地文件系統(tǒng)中的文件和文件夾時(shí),它不處于活動(dòng)狀態(tài)?!?/p>
基于訪問的枚舉有什么作用?
基于訪問的枚舉僅顯示用戶有權(quán)訪問的文件和文件夾。如果用戶沒有文件夾的“讀取”(或等效)權(quán)限,則Windows將從用戶視圖中隱藏該文件夾。僅當(dāng)查看共享文件夾中的文件和文件夾時(shí),此功能才有效。在本地文件系統(tǒng)中查看文件和文件夾時(shí),該按鈕不處于活動(dòng)狀態(tài)。
誰會(huì)對(duì)此功能感興趣?
想要控制哪些文件和文件夾對(duì)網(wǎng)絡(luò)用戶可見的IT管理員
想要控制用戶體驗(yàn)的IT管理員
例如,如果在包含許多用戶主目錄的共享文件夾上啟用基于訪問的枚舉,則訪問該共享文件夾的用戶只能看到其個(gè)人主目錄;其他用戶的文件夾從視圖中隱藏。
默認(rèn)情況下,ABE 處于禁用狀態(tài)。
查看vserver-name和share-name
DM5K::> vserver cifs share show
Vserver Share Path Properties Comment ACL
-------------- ------------- ----------------- ---------- -------- -----------
svm admin$ / browsable - -
svm c$ / oplocks - BUILTIN\Administrators / Full Control
browsable
changenotify
show-previous-versions
svm ipc$ / browsable - -
svm vol01 /vol01 browsable - Everyone / Change
changenotify
oplocks
show-previous-versions
svm vol02_bak /vol02_bak oplocks - Everyone / Full Control
browsable
changenotify
show-previous-versions
5 entries were displayed.
查看vol01共享文件夾屬性
DM5K::> vserver cifs share show -vserver svm -share-name vol01
Vserver: svm
Share: vol01
CIFS Server NetBIOS Name: FILENAS
Path: /vol01
Share Properties: browsable
changenotify
oplocks
show-previous-versions
Symlink Properties: symlinks
File Mode Creation Mask: -
Directory Mode Creation Mask: -
Share Comment: -
Share ACL: Everyone / Change
File Attribute Cache Lifetime: -
Volume Name: vol01
Offline Files: manual
Vscan File-Operations Profile: standard
Maximum Tree Connections on Share: 4294967295
UNIX Group for File Create: -
添加ABE屬性
DM5K::> vserver cifs share properties add -vserver svm -share-name vol01 -share-properties access-based-enumeration
DM5K::> vserver cifs share show -vserver svm -share-name vol01
Vserver: svm
Share: vol01
CIFS Server NetBIOS Name: FILENAS
Path: /vol01
Share Properties: oplocks
browsable
changenotify
access-based-enumeration
show-previous-versions
Symlink Properties: symlinks
File Mode Creation Mask: -
Directory Mode Creation Mask: -
Share Comment: -
Share ACL: Everyone / Change
File Attribute Cache Lifetime: -
Volume Name: vol01
Offline Files: manual
Vscan File-Operations Profile: standard
Maximum Tree Connections on Share: 4294967295
UNIX Group for File Create: -
DM5K::> vserver cifs share properties remove -vserver svm -share-name vol01 -share-properties access-based-enumeration
移除ABE屬性
DM5K::> vserver cifs share show -vserver svm -share-name vol01
Vserver: svm
Share: vol01
CIFS Server NetBIOS Name: FILENAS
Path: /vol01
Share Properties: oplocks
browsable
changenotify
show-previous-versions
Symlink Properties: symlinks
File Mode Creation Mask: -
Directory Mode Creation Mask: -
Share Comment: -
Share ACL: Everyone / Change
File Attribute Cache Lifetime: -
Volume Name: vol01
Offline Files: manual
Vscan File-Operations Profile: standard
Maximum Tree Connections on Share: 4294967295
UNIX Group for File Create: -