RE: Logical drive sharing with Windows 2003 Server
From: Feng Mao (fengmao_at_online.microsoft.com)
Date: 08/16/04
- Next message: Feng Mao: "RE: fallback solution for NT 4.0 upgrade"
- Previous message: Tel: "Can't add win 2003 to Active Directory"
- In reply to: Avalon1178: "Logical drive sharing with Windows 2003 Server"
- Messages sorted by: [ date ] [ thread ]
Date: Mon, 16 Aug 2004 08:47:30 GMT
Hi Avalon,
Thank you for posting!
According to my understanding, all local logical drives are shared as
Administrative share by default in all Windows NT based computer (included
Windows 2000, Windows XP, Windows 2003). Also, the Windows folder (For
example, C:\Windows) will be shared as ADMIN$ by default as well. However,
only Administrators and System account have the permission to access such
share.
Such hidden administrative shares that are created by the computer (such as
ADMIN$ and C$) can be deleted, but the computer re-creates them after you
stop and restart the Server service or restart your computer. Hidden shares
that are created by users can be deleted, and they are not re-created after
you restart your computer. Microsoft Windows XP Home Edition does not
create hidden administrative shares.
We recommend that you do not delete administrative shares that Windows
created for root partitions and volumes (such as C$) and the system root
folder (ADMIN$). Deleting these folders can cause problems for
administrators and programs or services that rely on these shares. For
example, both Microsoft Systems Management Server (SMS) and Microsoft
Operations Manager (MOM) 2000 require administrative shares for correct
installation and operation.
Method 1: Deleting default administrative shares for the current session
only
To delete a hidden administrative share for the current session only,
follow these steps:
1. In Control Panel, double-click "Administrative Tools", and then
double-click "Computer Management".
2. Expand "Shared Folders", and then click "Shares".
3. In the "Shared Folder" column, right-click the share that you want to
delete, click "Stop sharing", and then click "OK".
Method 2: Deleting default administrative shares for current and later
sessions
Warning If you use Registry Editor incorrectly, you may cause serious
problems that may require you to reinstall your operating system. Microsoft
cannot guarantee that you can solve problems that result from using
Registry Editor incorrectly. Use Registry Editor at your own risk.
To delete the hidden administrative shares for all root partitions and
volumes (such as C$) and the system root folder (ADMIN$) and to prevent
Windows from re-creating them, add an AutoShareWks DWORD value to the
following registry key, and then set its value data to 0:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters
For additional informaiton, please visit the below article in Microsoft
knowledge base:
314984 How to create and delete hidden or administrative shares on client
http://support.microsoft.com/?id=314984
Have a nice day!
Thanks & Regards,
Feng Mao [MSFT], MCSE
Microsoft Online Partner Support
Get Secure! - www.microsoft.com/security
=====================================================
When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------
| From: Avalon1178@aol.com (Avalon1178)
| Newsgroups: microsoft.public.windows.server.migration
| Subject: Logical drive sharing with Windows 2003 Server
| Date: 15 Aug 2004 20:19:30 -0700
| Organization: http://groups.google.com
| Lines: 20
| Message-ID: <8e243bf1.0408151919.49c692b@posting.google.com>
| NNTP-Posting-Host: 172.193.87.41
| Content-Type: text/plain; charset=ISO-8859-1
| Content-Transfer-Encoding: 8bit
| X-Trace: posting.google.com 1092626370 6003 127.0.0.1 (16 Aug 2004
03:19:30 GMT)
| X-Complaints-To: groups-abuse@google.com
| NNTP-Posting-Date: Mon, 16 Aug 2004 03:19:30 +0000 (UTC)
| Path:
cpmsftngxa06.phx.gbl!TK2MSFTNGXA01.phx.gbl!TK2MSFTNGP08.phx.gbl!newsfeed00.s
ul.t-online.de!t-online.de!fr.ip.ndsoftware.net!proxad.net!postnews2.google.
com!not-for-mail
| Xref: cpmsftngxa06.phx.gbl microsoft.public.windows.server.migration:13065
| X-Tomcat-NG: microsoft.public.windows.server.migration
|
| This may include other servers like Windows 2000 Server or Windows NT,
| but anyway, I noticed that Windows 2003 have the logical drives shared
| for administrative purposes (i.e. c$, d$, etc...) by default. Isn't
| this a security risk? What are the ramifications if I disable the
| shares on these drives (not that I can in the simple matters since
| Windows 2003 gives me a "This share was created for administrative
| purposes only..." Basically I set up a home network with a box
| containing Windows 2003 Server to function as my central file server
| in my network. But since my network infrastructure is set up as a
| wireless home network, I'm paranoid that someone may be able to break
| into my network (assuming they were able to crack the WEP encryption)
| and access all the important documents in that server....
|
| Why are these logical drives shared and what happens if I disable them
| from being shared (Windows makes it complicated to disable them so
| there has to be a reason why they're shared by default...)
|
| Thanks.
|
| Avalon1178
|
- Next message: Feng Mao: "RE: fallback solution for NT 4.0 upgrade"
- Previous message: Tel: "Can't add win 2003 to Active Directory"
- In reply to: Avalon1178: "Logical drive sharing with Windows 2003 Server"
- Messages sorted by: [ date ] [ thread ]
Relevant Pages
|
