SMB Access Based Enumeration

Access Based Enumeration (ABE) is a Microsoft SMB feature that filters the files, directories, and resources available on a file share so that a user can see only those objects for which the user has permission.

With ABE enabled, SMB verifies user permissions at the time of the access request, and then performs the filtering operation. Every access request causes a filter calculation. ABE repeats the same process for identical directory requests. This process ensures enforcement of the read and write privileges for all requests, and protects confidential information. With ABE disabled, this filtering does not occur, but the access permission provided to each user is still in place on the file or directory level.

HPE StoreEasy supports disabling and enabling ABE for each file share through the management console and using PowerShell.