Re: Network Access and Passwords
From: Roger Abell [MVP] (mvpNOSPAM@asu.edu)
Date: 01/06/03
- Next message: Joe P.: "XP/Pocket PC, desktop, access rights"
- Previous message: Yattster: "Accessing the Admin acct at login and/or Switch User"
- In reply to: Graeme: "Network Access and Passwords"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
From: "Roger Abell [MVP]" <mvpNOSPAM@asu.edu> Date: Sun, 5 Jan 2003 20:07:44 -0700
"Graeme" <milngavie@ntlworld.com> wrote in message
news:AP2S9.122$Fb4.24833@newsfep2-gui...
> Does anyone know how to get rid of the Windows default shares for
> "administrative purposes"?
>
This depends on the version of Windows.
For XP you need to have a registry key
at: HKLM\System\CurrentControlSet\Services\lanmanserver\parameters
named: AutoShareWks
valued: 0
While you are there it does not hurt to set AutoShareServer to 0 and this
will then also cover other versions of Windows.
> I am not allowed to add permissions to them due to them being for
> "administrative purposes only"
If you want to share out the whole drive with different permissions
then define a new share. The same thing can be shared using more
than one sharename and each can have different permissions.
> yet the whole network can access any of my
> hard drives including non shared ones using these share names!!!
>
Then the whole network has admin access to your machine or else
this would not be so. Administrative shares are only available when
the access is made with an account that is in the Administrators group.
> I really need these turned off as they pose a serious security threat and
> defeat the purpose of creating shares with permissions, as they can be
used
> to bypass the user created shares.
You have a bigger problem if everyone has access to an admin account.
>
> Also, how do I stop windows from saying "permission denied" whenever I try
> to access a shared folder on another machine, as I need the login window
to
> be displayed so that I can enter the correct user name and password,
instead
> of it telling me that I don't have access.
This depends on what OS the machine is that is used to try
to get access. Win9x/Me family behaves differently from
the NT family when used as the client machine.
This also depends on the serving/sharing machine,
whether it is Home or Pro (and if so in Simplified
sharing mode or not).
>
> Anyone got any suggestions?
>
> Graeme
>
>
-- Roger Abell MS MVP (Security, Windows), MCDBA, MCSE both Associate Expert - Windows XP ExpertZone http://www.microsoft.com/windowsxp/expertzone
- Next message: Joe P.: "XP/Pocket PC, desktop, access rights"
- Previous message: Yattster: "Accessing the Admin acct at login and/or Switch User"
- In reply to: Graeme: "Network Access and Passwords"
- Messages sorted by: [ date ] [ thread ] [ subject ] [ author ] [ attachment ]
Relevant Pages
|
