applying Share Level Permissions

1. In System one server login as an administrator 
2. open the ADUC console and create same user account user1, user2, user3.
3. In System one server open the E:\ Drive and create a new folder open name it sales and create same files.
4. right click on the sales folder and click on share with and click on specific people.
5. click on down arrow click on find people and the user name and click on OK
select permission read.
6. the user2 and give the permission to read and write.
7. click on share.
8. In System 2 client computer login as user1.
9. access the sales shared folder from the network.

Verification 

open client system login as user 

open Run and type

\\System_name\sales

         or

\\10.0.0.1\sales

access the files permissions read.

Creating The  Hidden share folder by using $ sing (sales$)

Creating Map Network Drive 

1. In Sys2 client computer login as user2 open the run
2. \\Sys1 click ok 
3. right click on sales share folder and
4. click on the map network drive 
5. click on finish.
6. In System two open computer and access map network drive.

Access-based Enumeration (ABE)

1. In System login as administrator open the E:\ drive open the sales share folder.
2. Right click on a file and click property.
3. Select the security tab.
4. select user- user2.
5. check the box read  Deany

Verification 

In client computer login as user2 access, the sales share folder and check the files.