Re: Defualt C$ Share

From: Doug Knox MS-MVP (dknox_at_mvps.org)
Date: 06/29/05 

Date: Tue, 28 Jun 2005 23:26:02 -0400

So much for A+ certifications. This is not true. The $ indicates an Administrative share, and they are created by default on all Windows 2000/XP machines. Any user with the Administrator credentials on the machine can access these shares. 

-- 
Doug Knox, MS-MVP Windows Media Center\Windows Powered Smart Display\Security
Win 95/98/Me/XP Tweaks and Fixes
http://www.dougknox.com
--------------------------------
Per user Group Policy Restrictions for XP Home and XP Pro
http://www.dougknox.com/xp/utils/xp_securityconsole.htm
--------------------------------
Please reply only to the newsgroup so all may benefit.
Unsolicited e-mail is not answered.
 
"Micah E." <mpezzell@comcast.net> wrote in message news:udGdnehzKLtA2VzfRVn-3g@comcast.com...
> No, an administrator will have to first define the C drive to be shared, 
> either through logon script, with an answer file during install, or if the 
> admin used an image.
> 
> If an admin did do this, most likely you will not have any rights to install 
> any apps or even be able to access a server in a client/server environment.
> 
> Even if you are not an admin, you will know that this share exists. And this 
> is not a "built in share" on windows XP. Sharing the C drive must be 
> defined, it is not automatic.
> 
> -- 
> Micah E.
> A+ Cert.
> 
> 
> "SethGecko" <sethgecko@webmail.co.za> wrote in message 
> news:vLWdnWUdEKP9nFzfRVn-tw@is.co.za...
>> Hi All
>>
>> I know that if one is on a network then it is possible for the
>> "Administrator" to \\computername\C$ and see your whole drive
>> due to the built in share on windows XP.
>>
>> I would like to know if there is any way that one can detect whether this
>> has been done if one suspects it.
>> Is there any spyware or related software that I can install to track if 
>> this
>> is being done ?
>> Is there any way in the server environemnt where it is logged ?
>> Is there anything at all i can do on my PC to see if it was accessed in 
>> this
>> way.
>>
>> Any help would be appreciated !
>>
>>
>> Thanks !
>>
>> 
> 
>