Default Shares

From: nospam (bluetooth995_at_gmail.com)
Date: 10/24/05 

Date: 24 Oct 2005 06:31:18 -0700

Hi all,

Any secure practices would recommend you to
disable all the windows default shares -C$..Admin$

Of course, this is going to create problem for the system
administrator - this limit their ability to
manage the system with WMI, remote access,etc...

So, if the admininstrator is having a strong password
does it somehow mitigate the risk of having default shares?

I would normally think defense in depth - though admin with
strong password, but shnd still disable default shares

Any comments?

Relevant Pages

  • Re: Default Shares
    ... I would not worry too much about disabling the default shares if they are ... administrator account to logon to any domain computer that is not known to ... local administrators group of domain computers which can be easily managed ...
    (microsoft.public.win2000.security)
  • Re: Network shares C: as $ share
    ... These are as Brendan said, administrative shares, ... administrator on the machine. ... > put this file in the windows start up file and it should ... >>the network. ...
    (microsoft.public.windowsxp.security_admin)
  • Re: Unable to turn off sharing
    ... > Hidden shares are created by default, ... > level users on the system and are typically used for remote management ... administrator privileges have access to them. ...
    (microsoft.public.security)
  • Re: Viewability of shared folders ?
    ... someone knows your administrator password then it can access your system any ... You can also protect the computer by using personal or dedicated firewall to ... it is possible to remote these shares by editing registry. ... > drives... ...
    (microsoft.public.win2000.security)
  • Re: Unable to turn off sharing
    ... >> Hidden shares are created by default, ... >> administrator level users on the system and are typically used for remote ... > To add to what Jason has advised, I would leave them where they are. ... > administrator privileges have access to them. ...
    (microsoft.public.security)