Remove default Windows sharing $ Dollar Sign

Go into Computer Management shared folders, shares and right click on the drive and click on stop sharing.

C$ D$ E$ - Root of each partition.
ADMIN$ - %SYSTEMROOT% -this share is used by the system during any remote administration of a computer.
FAX$ - On W2K Server- this used by fax clients in the process of sending a fax.
IPC$ - Temporary connections between servers using named pipes essential for communication between programs.
NetLogon - This share is used by the Net Logon service of a W2K, 2003 and NT Server PRINT$ - %SYSTEMROOT%\SYSTEM32\SPOOL\DRIVERS Used during remote administration of printer

It is possible to simply remove the share from Server Manager (in NT) or Shared Folders (in W2K/XP/2003) but the problem with this method is that the shares will automatically be recreated when the machine reboots.

USe this Method to remove

You must edit the registry
For NT 4.0/W2K/Windows Server 2003s, the change is:

Hive: HKEY_LOCAL_MACHINE
Key: SYSTEM\CurrentControlSet\Services\LanManServer\Parameters
Name: AutoShareServer
Data Type: REG_DWORD
Value: 0

You need to reboot the machine once you edit the registry

[If you can't find the value in the registry under the exact location (i.e. it does not exist) - please right click in the right pane of the window and create it]

For NT 4.0 Workstation/W2K Pro/XP Pro, change

Hive: HKEY_LOCAL_MACHINE
Key: SYSTEM\CurrentControlSet\Services\LanManServer\Parameters
Name: AutoShareWks
Data Type: REG_DWORD
Value: 0

Unfortunately this registry hack does NOT stop the IPC$

C$ D$ E$ - Root of each partition.
ADMIN$ - %SYSTEMROOT% -this share is used by the system during any remote administration of a computer.
FAX$ - On W2K Server- this used by fax clients in the process of sending a fax.
IPC$ - Temporary connections between servers using named pipes essential for communication between programs.
NetLogon - This share is used by the Net Logon service of a W2K, 2003 and NT Server PRINT$ - %SYSTEMROOT%\SYSTEM32\SPOOL\DRIVERS Used during remote administration of printer

It is possible to simply remove the share from Server Manager (in NT) or Shared Folders (in W2K/XP/2003) but the problem with this method is that the shares will automatically be recreated when the machine reboots.

USe this Method to remove

You must edit the registry
For NT 4.0/W2K/Windows Server 2003s, the change is:

Hive: HKEY_LOCAL_MACHINE
Key: SYSTEM\CurrentControlSet\Services\LanManServer\Parameters
Name: AutoShareServer
Data Type: REG_DWORD
Value: 0

You need to reboot the machine once you edit the registry

[If you can't find the value in the registry under the exact location (i.e. it does not exist) - please right click in the right pane of the window and create it]

For NT 4.0 Workstation/W2K Pro/XP Pro, change

Hive: HKEY_LOCAL_MACHINE
Key: SYSTEM\CurrentControlSet\Services\LanManServer\Parameters
Name: AutoShareWks
Data Type: REG_DWORD
Value: 0

Unfortunately this registry hack does NOT stop the IPC$

The $ sign simply means it's a hidden share. In this case, it's a hidden ADMIN share.

If your users can access \\yourpc\c$ over the network, you have other security problems you need to fix.

I did this to my machine to keep out my boss, but normally you don't want to do this, as normal users simply can't access this share.

It does require hacking the Reg and if the above didn't work for you, contact me and I'll dredge out the WinXP instructions...they're here somewheres....