The Storage Team Blog about file services and storage features in Windows and Windows Server.
We've published a KB for using access-based enumeration together with DFS Namespaces. Access-based enumeration makes visible only those files or folders that the user has the rights to access. When access-based enumeration is enabled, Windows will not display files or folders that the user does not have the rights to access.
It takes some tweaking to make this work in a namespace. The KB (907458) also provides a link to download the ABE tool.
I've got ABE working with DFS however can't seem to get it working when the links are to EMC NAS shares.
Enable ABE is relatively straightforward from a checkbox. But implementing ABE with the right permissions (nested grouping) is a nightmare! What further debugging tools are available to verify ABE? As when disabled, access works to the correct folders. When enabled, some subfolders don't even have files listed.