DFS-N: The access-based enumeration setting should be identical in the DFS namespace database and on the shared folder hosting the namespace root for the following namespace

Updated: July 14, 2010

Applies To: Windows Server 2008 R2, Windows Server 2012

This topic is intended to address a specific issue identified by a Best Practices Analyzer scan. You should apply the information in this topic only to computers that have had the File Services Best Practices Analyzer run against them and are experiencing the issue addressed by this topic. For more information about best practices and scans, see Best Practices Analyzer.

Issue

Access-based enumeration is enabled on a DFS namespace, but not on the shared folder hosting the namespace root. Namespace:

Impact

Access-based enumeration will not work, resulting in DFS folders being visible to users who do not have permission to view the folders.

Resolution

Use DFS Management or the Dfsutil command-line tool to disable and then enable access-based enumeration on the namespace, and then do not use other tools to modify this setting.

To do so, see Enable Access-Based Enumeration on a Namespace.