14.Verifying Access Based Enumeration

 Verifying Access Based Enumeration

A computer running windows 2012 server Domain Controller.

A member server running windows server 2012 or Client running windows 7.

SYS1                                                                         SYS2

Domain Controller                                                 Member Server / Client

IP Address             10.0.0.1                                     IP Address            10.0.0.2

Subnet Mask          255.0.0.0                                  Subnet Mask         255.0.0.0

Preferred DNS      10.0.0.1                                      Preferred DNS    10.0.0.1

Steps:

1. Logon to a Sys1 as Administrator Open any drive and create a shared folder (Ex: Project) with everyone Read / Write permissions along with some files in it. 2. click on one of the file and select Properties.

2. Select Security, click Edit and Add, Enter user1, click OK.

3. Select user1 and set the permission Deny Read, click OK.

Verification:

1. Logon to Member Server or Client as User (User1).

2. Open Network Icon, Select SYS1, access the shared folder Project and verify for the files present.