General discussion

  • Creator
    Topic
  • #2181792

    How To Prevent from $ (Dollar Sign) default sharing in Windows

    Locked

    by whistlerpk ·

    Hi, This is Abid…working as Network Admn windows 2000 above 200 nodes..wel i am facing a problm ..can any body help me that how can i prevent from $ Dollar sign default sharing in windows …how to remove this default drive sharing …data is not secure as every one can enter in my drive by $ dollar sign in LAN

All Comments

  • Author
    Replies
    • #3171122

      Reply To: How To Prevent from $ (Dollar Sign) default sharing in Windows

      by dryflies ·

      In reply to How To Prevent from $ (Dollar Sign) default sharing in Windows

      The C$ share to my knowledge cannot be removed. It is used for administrative purposes. However, you should go into the security tab for your root folder (usually C:\) and deny everything for “everyone”. then you can go into your local security policy and set the security policy to lockt the system down further. see http://support.microsoft.com/default.aspx?scid=kb;en-us;823659 for information on specific security policy items. Be Careful! I was fiddling with local security policy one time and ended up making it so that nobody had access to anything.

    • #3170920

      Reply To: How To Prevent from $ (Dollar Sign) default sharing in Windows

      by joseph moore ·

      In reply to How To Prevent from $ (Dollar Sign) default sharing in Windows

      Reg hack to disable administrative shares:
      http://www.jsifaq.com/SUBA/TIP0000/RH0096.HTM

    • #3191333

      Reply To: How To Prevent from $ (Dollar Sign) default sharing in Windows

      by gigelul ·

      In reply to How To Prevent from $ (Dollar Sign) default sharing in Windows

      Hi,
      First of all, the admin shares (C$, D$, Admin$, etc) are not available to every one, only to a user who know the Local\DomainAdmin username and password.
      I agree that this can be a security problem, but you must consider carefully if you need these shares or not. For example a corporate antivirus (Symantec) require these shares in order to install remote the clients or other third-party programs like backup programs, etc.

      First answer gave you the solution to disable these default shares. In addition to this, you can use a login script to merge automaticaly these registry key from a network location/share to local registry on each machine.

    • #3192791

      Reply To: How To Prevent from $ (Dollar Sign) default sharing in Windows

      by sean ross ·

      In reply to How To Prevent from $ (Dollar Sign) default sharing in Windows

      Of course backup a copy of your registry first.

      FOR WORKSTATION

      Default, Admin Shares enabled:
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters]
      “AutoShareWks”=dword:00000001

      Change to:
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters]
      “AutoShareWks”=dword:00000000

      FOR SERVER

      Default, Admin Shares enabled:
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters]
      “AutoShareServer”=dword:00000001

      Change to:
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters]
      “AutoShareServer”=dword:00000000

Viewing 3 reply threads