Default Shares on Member Servers

I'm trying to secure access to our servers. We have 2 domain controllers, 1
windows 2000, the other windows 2003 and 3 member servers, all running
windows 2003.

From a computer that is not a member of the domain, attempting to access an
administrative share on a DC, we are presented with a prompt for a username
and password.

The same computer connecting to an administrative share on a member server,
there is no prompt and the access is allowed.

Our AV software uses administrative shares to update so I can't simply
disable them.

I assumed this had something to do with the 'Access this computer from the
network' policy but this appears not to be the case; The 'Everyone' group is
assigned this permission on the DC's and authentication is required for
those servers.

How can I prevent unauthenticated access to these member server shares, or
even better, only permit Administrators access to the shares?

Do i need to manually create the shares with custom security?

Thanks.

--
JB


.

Relevant Pages

  • Re: Default Shares on Member Servers
    ... On the member servers, the local Administrators group contains ... If the C$, etc. are indeed the administrative shares, then the ...
    (microsoft.public.windows.server.security)
  • Re: Windows 2000 Member Server Authentication
    ... > servers are shared to users in the domain not users of the ... if you at the run prompt typed ... > the shares it has to offer. ... Your member servers are not correctly joined to the ...
    (microsoft.public.win2000.security)
  • Re: Admin accounts for Run As purposes only
    ... Administrators group of each server that needs to be managed. ... is this just as strong as a Domain Admin or is it more limited / ... > don't have enough servers to achieve a separation. ... >> I know we can delegate alot of tasks now such as user account ...
    (microsoft.public.windows.server.active_directory)
  • FW: Help with Nimda.E?
    ... I have 50+ NT/2k servers on the dmz LAN. ... domain require shares to function. ... For more information on this free incident handling, management ... and tracking system please see: http://aris.securityfocus.com ...
    (Incidents)
  • Re: cant get access to disk share when connecting from a remote s
    ... "To set permissions for users who access this folder over the network, ... The origianl script attached here was my ... shares. ... >> account being used to the local administrators group on the DUT. ...
    (microsoft.public.windows.server.scripting)