topic How to enable Access Based Enumeration via Powershell Toolkit for OnTap 9 in ONTAP Discussions

How to enable Access Based Enumeration via Powershell Toolkit for OnTap 9

Jim_Robertson — Wed, 04 Jun 2025 14:10:09 GMT

I cannot seem to find a way to enable Access Based Enumeration (ABE) via the NetApp Powershell Toolkit v4.5 and OnTap 9.0P2. Can anyone tell me how?

I went to the system manager and enabled it there, so it does show up in the share properties from the CLI:

prdc-ramp-01::> cifs share show -share-name ShareName1 -instance

                                      Vserver: vs0
                                        Share: ShareName1
                     CIFS Server NetBIOS Name: CifsServerName1
                                         Path: /ShareName1
                             Share Properties: access-based-enumeration
                                               browsable
                                               changenotify
                                               oplocks
                                               show-previous-versions
                           Symlink Properties: enable
                                               read_only
                      File Mode Creation Mask: -
                 Directory Mode Creation Mask: -
                                Share Comment: -
                                    Share ACL: Everyone / Full Control
                File Attribute Cache Lifetime: -
                                  Volume Name: ShareName1
                                Offline Files: manual
                Vscan File-Operations Profile: standard
            Maximum Tree Connections on Share: 4294967295
                   UNIX Group for File Create: -

But, if I use the PSK to get the Share Properties, it doesn't show up:

PS E:\Powershell> $Share | Select-Object {$_.ShareProperties}

$_.ShareProperties
------------------
{oplocks, browsable, changenotify, show_previous_versions}

I would think that this would be a value for the ShareProperties, but the help file for the Add-NcCifsShare doesn't even list it as an option:

-ShareProperties <String[]>
The list of properties for this CIFS share. Possible values:
"oplocks" - This specifies that opportunistic locks (client-side
caching) are enabled on this share.
"browsable" - This specifies that the share can be browsed by
Windows clients.
"showsnapshot" - This specifies that Snapshots can be viewed and
traversed by clients.
"changenotify" - This specifies that CIFS clients can request for
change notifications for directories on this share.
"homedirectory" - This specifies that the share is added and enabled
as part of the CIFS home directory feature. The configuration of this
share should be done using CIFS home directory feature interface.
"attributecache" - This specifies that connections through this share
are caching attributes for a short time to improve performance.

Re: How to enable Access Based Enumeration via Powershell Toolkit for OnTap 9

JGPSHNTAP — Mon, 08 Jan 2018 18:58:37 GMT

Here is a snippit from my code

add-nccifsshare -vservercontext $vserver -name $sharename -shareproperties oplocks,browsable,changenotify,show_previous_versions,access_based_enumeration -Path "/$($volname)/ud01"

Re: How to enable Access Based Enumeration via Powershell Toolkit for OnTap 9

Jim_Robertson — Mon, 08 Jan 2018 19:18:31 GMT

Thanks, @JGPSHNTAP, that does appear to work. So, it's just not documented, and it does not show up if you do a $Share | Select-Object {$_.ShareProperties}.

Or, am I looking under the wrong property to verify that it's been set? It shows the other settings {oplocks, browsable, changenotify, show_previous_versions}, so I don't know why it wouldn't show ABE.

Thanks again for the help!

Re: How to enable Access Based Enumeration via Powershell Toolkit for OnTap 9

JGPSHNTAP — Mon, 08 Jan 2018 19:28:48 GMT

I don't know what $share is, but I assume it's get-nccifssshare

It's there

Try this

get-nccifsshare $share | Select -ExpandProperty shareproperties

Re: How to enable Access Based Enumeration via Powershell Toolkit for OnTap 9

Jim_Robertson — Mon, 08 Jan 2018 21:10:25 GMT

Ok, that worked!

$Share was the actual share object itself: $Share = Get-NcCifsShare -Name MyShare

So, this worked:

Get-NcCifsShare -Name $Share.ShareName | Select -ExpandProperty shareproperties

Thanks again for the help!