This project has moved. For the latest updates, please go here.

Previous Install SSDT Manual Install Install Extended Events Manager Next

Install Access Based Enumeration

FineBuild can install and configure Windows Access Based Enumeration (ABE) as part of the SQL Server install process. If you do not want to include Access Based Enumeration in your FineBuild install, then do not download it.

Access Based Enumeration is written by Microsoft. It was chosen to be included in FineBuild because it prevents users who do not have access to the server from discovering information about shares and other details for the server. Access-based enumeration should be activated for all SQL Server machines.

Access-based enumeration was introduced as an optional component in Windows Server 2003 SP1 and can also be installed on Windows 2008. It is a standard part of Windows 2008 R2 and above, but it still needs to be configured.

Access Based Enumeration home page http://technet.microsoft.com/en-us/library/dd772681(WS.10).aspx
Access Based Enumeration download http://www.microsoft.com/Downloads/details.aspx?FamilyID=04a563d9-78d9-4342-a485-b030ac442084&displaylang=en
The x86 download must be named: ABEUIx86.msi. The x64 download must be named: ABEUIx64.msi
Access Based Enumeration tutorial http://www.windowsnetworking.com/articles_tutorials/Implementing-Access-Based-Enumeration-Windows-Server-2003.html

Security Compliance

Access Based Enumeration helps to reduce the surface area of the host server. If you setup Security Compliance then Access Based Enumeration will always be implemented.

FineBuild Access Based Enumeration Install

Automated silent installation of Access Based Enumeration is performed by Process Id 4TA and is controlled by the parameters below:

Install Parameter Build SQL2005 SQL2008 SQL2008 R2 SQL2012 SQL2014 SQL2016
SetupABE FULL Yes Yes Yes Yes Yes Yes
SetupABE WORKSTATION Yes Yes Yes Yes Yes Yes
SetupABE CLIENT Yes Yes Yes Yes Yes Yes

In order to maintain compatibility with older versions of SQL FineBuild, the parameter InstABE can also be used.

FineBuild also uses the following parameters to help install Access Based Enumeration:
Parameter Platform Default Value Description
ABEX86msi 32-bit ABEUIx86.msi Name of Access Based Enumeration install file
ABEX64msi 64-bit ABEUIx64.msi Name of Access Based Enumeration install file

Access Based Enumeration cannot be installed on a Windows Core operating system.

The FineBuild install for Access Based Enumeration includes the following:
  • Perform a Access Based Enumeration install
  • Configure Access Based Enumeration to protect the Operating System

Manual Access Based Enumeration Install

The following steps show what you would have to do to install Access Based Enumeration manually. FineBuild does all of this work for you automatically.

Install Access Based Enumeration

1) Navigate to the Additional Components folder and double-click on the relevant file:

32-bit systems ABEUIx86.msi
64-bit systems ABEUIx64.msi

ABE Explorer.png
2) The Welcome screen is displayed. Click Next to continue
ABE Welcome.png
3) Accept the license agreement. Click Next to continue
ABE License.png
4) Use the default installation folder. Select the option to install for Everyone, then click Next to continue
ABE Location.png
5) Select the option to Enable Access-based enumeration on all existing folders, then click Next to continue
ABE Enumeration.png
6) Confirm the installation parameters, then click Next to continue
ABE Ready.png
7) The installation is complete. Click Close to exit
ABE Complete.png

Configure ABE

1) To configure Access-based enumeration, click on CmdHere.bat. Type the following command and press Enter.
ABECMD /enable /all

ABE Enable.png
2) The following message should be displayed:
ABE Confirm.png
Copyright FineBuild Team © 2011 - 2016. License and Acknowledgements
Previous Install SSDT Top Install Extended Events Manager Next

Last edited Aug 27, 2016 at 2:19 PM by EdVassie, version 9