Re: Another hand for Microsoft - Clap Clap Clap

Tech-Archive recommends: Fix windows errors by optimizing your registry

George

I don't know what you are on about. Bruce is right elsewhere in this thread.
Administrative shares can only be accessed by admins by design. I was in a
hurry with my last answer and didn't fully explain myself. Administrative
shares cannot be easily modified. I think you may be confusing
administrative shares with "hidden" shares. Adding a $ onto the end of any
share name will hide it from a casual observer. This is not the same as an
administrative share. Why you would want to share the C: drive on a domain
controller is beyond me. It is very poor practice and not recommended
anywhere that I have seen. If you did want to do this you would have to
alter many things, the default domain controller policy, add a new share,
possibly hide the share with the $, reset the NTFS permissions for the whole
drive. There is a reason this is hard to do. It is a major security risk. If
you are just experimenting with a home network then have at it. If it is a
business network then you are crazy to do this.

Kerry

"George Hester" <hesterloli@xxxxxxxxxxx> wrote in message
news:e%23Ydb3s6FHA.736@xxxxxxxxxxxxxxxxxxxxxxx
> Yes and definitely won't do that. Oh well another Clap Clap Clap.
>
> --
>
> George Hester
> _________________________________
> "Kerry Brown" <kerry@xxxxxxxxxxxxxxxxxxx*a*m> wrote in message
> news:#$FjwRi6FHA.3544@xxxxxxxxxxxxxxxxxxxxxxx
>> "George Hester" <hesterloli@xxxxxxxxxxx> wrote in message
>> news:u10hEGi6FHA.3636@xxxxxxxxxxxxxxxxxxxxxxx
>> > Hi Kerry. There is no share. It is not necessary. Or maybe I should
> say
>> > it is not spposed to be necessary. Because C$ is the native admin
> share,
>> > it
>> > is not necessary to set Share on the C drive in the computer I want to
>> > access.
>> >
>> > Windows ME has the option to set up a Network drive. So say the other
>> > machine is called hester. Thus the Network drive would be \\hester\c$
>> >
>> > Not working. Works fine when I log in using Windows ME with an admin
>> > account
>> > in the domain but not a Domain User account.
>> >
>> > Been bouncing around with Group policy but nothing yet has worked.
> Still
>> > keep getting this Network password prompt with no User request connect
> as.
>> >
>> > In answer to your questions:
>> >
>> > 1) Windows 2000 Advanced Server SP4
>> > 2) Yes
>> >
>> > But it really doesn't matter here. The same is true for the client
>> > Windows
>> > XP SP2 caanot set a Network drive using the default admin share to that
>> > either in ME.
>> >
>>
>> I don't have time to find the relevant documentation but I believe that
> the
>> default is that only domain admins have access to administrative shares
>> on
>> domain controllers. I don't know if this is part of the domain controller
>> default policy or not but the behaviour is expected. To get around it I
>> think you would have to create an explicit share and then modify the NTFS
>> permissions for the whole C: drive, not a recommended course of action
>> for
> a
>> DC.
>>
>> Kerry
>>
>>
>


.

Relevant Pages

  • Re: Another hand for Microsoft - Clap Clap Clap
    ... Network drive there with Admin share. ... Enter that and the Domain user has acccess to the ... > Administrative shares can only be accessed by admins by design. ... > alter many things, the default domain controller policy, add a new share, ...
    (microsoft.public.windowsxp.general)
  • Re: Administrative Shares
    ... > of the admin accounts..... ... > "Roger Abell" wrote in message ... >> from the share access permissions, and at least for the install ... >> first define shares - they cannot use the administrative shares ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Admin$ and IPC$ shares disappear repeatedly
    ... Administrative shares then being listed as IPC$, ADMIN$, or C$. ... Mapping to network drives works, IF you do not specify a domain ... And when I manually create them via "net share IPC$" or "net share ADMIN$" ...
    (microsoft.public.win2000.general)
  • Re: Admin$ share on a workgroup
    ... >> XP Home Edition doesn't have administrative shares. ... I wish that was true, but it's cursed with Admin$, IPC$, C$ etc. ... >> Folder Options | View and scroll to the end of the list of advanced ... facilitating direct intra-LAN and possibly Internet attack. ...
    (microsoft.public.windowsxp.setup_deployment)
  • Re: Admin$ share on a workgroup
    ... >> XP Home Edition doesn't have administrative shares. ... I wish that was true, but it's cursed with Admin$, IPC$, C$ etc. ... >> Folder Options | View and scroll to the end of the list of advanced ... facilitating direct intra-LAN and possibly Internet attack. ...
    (microsoft.public.windowsxp.network_web)