CIFS users can access all shares including the shares for which the users do not have access permission

Hi, Community!

CIFS users can access all shares including the shares for which the users do not have access permission, the post will share with you how to solve the issue

Symptoms

A local CIFS user can access all CIFS share, but customer just add the user into a CIFS share.

The local user opt_user  as below just is added into CIFS share opt_user. But opt_user user can access other CIFS shares as above. So we think our CIFS share is not safe.

Solution

1. The issue is about Access Settings of CIFS service parameters. After ABSE (access based share enumeration) is enabled, only the CIFS shares that a user has permission to access are displayed when the user views the CIFS share information.

2. In CIFS Service, ABSE is disabled in default. So to resolve the issue, we enable the ABSE option. 

3. After enabling ABSE, we try to access other CIFS share, it is forbidden. The issue is resolved.

We warmly welcome you to enjoy our community!