Re: "Hidden" admin shares

From: David H. Lipman (DLipman~nospam~_at_Verizon.Net)
Date: 08/14/05 

Date: Sun, 14 Aug 2005 09:19:57 -0400

From: "Jeff" <jeff@naol.com>

| What are the "hidden" admin shares in XP Home and how are they a security
| risk?
|
| --
|
| Johnson@naol.com
|

They are such shares as C$, D$, etc.

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters
Double click on AutoShareServer and set it to 0 to disable it for a server.
Double click on AutoShareWks and set it to 0 to disable it for a
workstation.
If the entries are not present, Add Value of type REG_DWORD. The Range is 0
(disable) or 1 (enable - the default). 

-- 
Dave
http://www.claymania.com/removal-trojan-adware.html
http://www.ik-cs.com/got-a-virus.htm

Relevant Pages

  • RE: I have a problem
    ... > I have Windows 2000 Server and i face a problem when i ... malware, such as spyware or hacker tools. ... Check the AutoShareServer and AutoShareWks registry values to make sure ... To check for the admin shares, run NET SHARE at the CMD prompt. ...
    (microsoft.public.win2000.general)
  • RE: Need your help
    ... malware, such as spyware or hacker tools. ... Check the AutoShareServer and AutoShareWks registry values to make sure ... To check for the admin shares, run NET SHARE at the CMD prompt. ...
    (microsoft.public.win2000.general)
  • RE: I have a problem
    ... >> I have Windows 2000 Server and i face a problem when i ... Check the AutoShareServer and AutoShareWks registry ... To check for the admin shares, ...
    (microsoft.public.win2000.general)
  • Re: Sharing a root hard drive on server 2003
    ... It's probably not a good idea to delete the admin shares but ... sharing folders and not drivers. ... privilege to create a share. ... What "security policy" prevented this? ...
    (microsoft.public.windows.server.general)
  • Re: how can I delete the share name c$
    ... Set the value of AutoShareServer to 0 ... There is no downside in disabling the administrative shares. ... Can XP Home have Admin shares added to it using this method in reverse? ...
    (microsoft.public.win2000.general)