How to disable windows default share using group policy or script

Remove Administrative Shares

http://www.windowsnetworking.com/kbase/WindowsTips/Windows2000/AdminTips/Security/RemoveAdminShares.html

If the system does not need to be accessed or administered remotely you can permanently remove the hidden administrative shares by editing the registry. Go to:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters

To remove the hidden shares add a DWORD entry called AutoShareWks and set the DWORD value to 0. If you later need to restore access to the hidden shares you can simply delete the AutoShareWks DWORD entry and reboot the computer and the shares will automatically be recreated. The PC's will have to be restarted for this to take effect.

PsExec v1.94
By Mark Russinovich
Published: January 4, 2008

http://technet.microsoft.com/en-us/sysinternals/bb897553.aspx

And the batch file and noshare.reg file can be copied to the workstations where it can be run to add the Registry entry. add2reg.cmd

=========================

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanserver\parameters]
"AutoShareWks"=dword:00000000
=========================

=========================

C: regedit /s noshare.reg
goto tim

:tim
%Systemroot%\system32\shutdown /r /f
goto end

:end
=========================

Keep us informed as to your progress if you require further assistance.

If you think that any of the posts that have been made by all TR Members, have solved or contributed to solving the problem, please Mark them as Helpful so that others may benefit from the outcome. ;) :D