To stay updated on your favorite discussions, please create an account or log in. Then, click the Bookmark icon to subscribe and receive notifications.

dataguard and "Enable access-based enumeration" function in windows server

Options
FL51
FL51 W/ Member Posts: 1 Security Scout
in WithSecure Business Suite

Hello,

on a computer with F-secure client security premium dataguard doesn't seem to work on a share with a UNC access path for which the "Enable access-based enumeration" function is enabled on part of the path (windows server 2016).

best regards

dataguard_2023-11-30_13-58.png

Tagged:

Best Answer

  • Sethu Laks
    Sethu Laks W/ Partner, W/ Staff, W/ Moderator Posts: 221 Moderator
    Solved
    Options

    Hi @FL51

    Thank you for reaching out the WithSecure Community,

    As you're aware, the "Enable access-based enumeration" feature in Windows Server conceals files and folders that users lack permissions to access. You can activate this feature on a namespace, a share, or a folder via the Windows interface or the command line. Nevertheless, it's crucial to note that this feature may introduce compatibility issues with certain applications, like DataGuard, which rely on file system permissions to access files and folders on the network drive.

    Therefore, if you want to use DataGuard to protect your files and folders on a network drive that is accessed through a UNC path, you should make sure that the network drive is online and connected, that the network drive is hosted on a Windows server, and that the “Enable access-based enumeration” feature is disabled on the network drive. Alternatively, you can add the applications that need to access the files and folders on the network drive to the DataGuard trusted list by using the Policy Manager Console or the Client Security user interface. You can find more information here.

    Best regards,
    Sethu
    Community Moderator | Technical Support Engineer
    WithSecure™ https://www.withsecure.com/en/home

Categories