Hi Laura,
Is there any concern (other than SMS or MOM) if we disable
administrative shares for Domain Controller and Domain
Servers?
Correct me if I am wrong, administrative shares are only
accessible by Domain Administrator. Hence we can leave the
administrative shares and it depends alot on password
security on the organisation.
Thanks.
Philip Wang
>-----Original Message-----
>Do you mean the administrative C$ share? You can disable
that with a
>registry edit:
>
>Deleting Default Administrative Shares for Current and
Future Sessions
>
>WARNING: If you use Registry Editor incorrectly, you may
cause serious
>problems that may require you to reinstall your operating
system. Microsoft
>cannot guarantee that you can solve problems that result
from using Registry
>Editor incorrectly. Use Registry Editor at your own risk.
>
>To delete the hidden administrative shares for all root
partitions and
>volumes (such as C$) and the system root folder (ADMIN$)
and prevent Windows
>from re-creating them, add an AutoShareWks DWORD value to
the following
>registry key and set its value data to 0:
>HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lanma
nServer\Parameters
>
>The full text is found at this KB article:
>
>http://support.microsoft.com/default.aspx?scid=kb;en-
us;Q314984&sd=tech
>
>(All usual warnings regarding the perils of Registry
editing apply.)
>
>If your C: drive is manually shared, just right-click on
the drive letter in
>Explorer, go to the Sharing tab and click "Do not share
this drive".
>
>
>
>--
>******************************
>Laura E. Hunter - MCSE, MCT, MVP
>Replies to newsgroup only
>
>
>"Trozky" wrote in message
>news:eH1Ir87IEHA.1412@TK2MSFTNGP12.phx.gbl...
>> When W2k start my whole drive C: is shared by default,
can i disable this
>> option. I want, when w2k start my drive were not shared
>>
>> thanks for the support
>>
>> excuse my poor english
>>
>> Trozky
>>
>>
>
>
>.
>