Stopping the default share of C drive

Discussion in 'Windows Desktop Systems' started by Digdis, Dec 25, 2005.

  1. Digdis

    Digdis OSNN Addict Political User

    Messages:
    91
    Hi,
    My work PC has the default C$ share for C drive. I have too many reasons not to allow that. When I want to cancel this share, it tells me that the server service always creates this share when restarted. Is there any way to prevent this?
    D.
     
  2. Electronic Punk

    Electronic Punk Administrator Staff Member Political User Folding Team

    Messages:
    18,590
    Location:
    Copenhagen, Denmark
    Just make sure the built in administrator account has a password, or the account you are using does not have domain priviledges to view administrative shares.
     
  3. madmatt

    madmatt Bow Down to the King Political User

    Messages:
    13,312
    Location:
    New York
    IPC$ and ADMIN$ need access to it; especially on a domain type network. Therefore, I wouldn't recommend it. Windows will add it right back.
     
  4. Digdis

    Digdis OSNN Addict Political User

    Messages:
    91
    Thanks. Let me rephrase: as I don't always count on our infamous IT people, I'm afraid of the potential abuse caused by the automatic sharing of C$. I remember that on Win2K I could simply stop this share (I have WinXP now). How can I protect myself from such kind of abuse?
    D.
     
  5. madmatt

    madmatt Bow Down to the King Political User

    Messages:
    13,312
    Location:
    New York
    If you have files that you need to protect then the best means of protection is putting them on a USB drive and just plugging it in when you are at your desk and unplugging it when you are away.

    But, as I said above, network resources (especially in a domain environment) need access to these shares (i.e. SMS/WSUS needs access to the Software Distribution folder in the the WINDOWS directory and it gains access via the C$ share).
     
  6. Electronic Punk

    Electronic Punk Administrator Staff Member Political User Folding Team

    Messages:
    18,590
    Location:
    Copenhagen, Denmark
    Well, the only way you could do it is by usergroup permissions.

    What tasks do your IT people need to perform?
     
  7. Digdis

    Digdis OSNN Addict Political User

    Messages:
    91
    I see. Thanks.
    D.
     
  8. nd4gtspeed

    nd4gtspeed OSNN One Post Wonder

    Messages:
    6
    i still dont get it... i have a similar problem
     
  9. madmatt

    madmatt Bow Down to the King Political User

    Messages:
    13,312
    Location:
    New York
    What don't you understand? You can't remove a default share. The system and network need it to be there.

    If you need to protect files from others then change the permissions or move them to a USB drive.
     
  10. fitz

    fitz Just Floating Along Staff Member Political User Folding Team

    Messages:
    4,076
    Location:
    Chicagoland
    This KB article is the reghack to disable the creation of the administrative shares. It is for NT4 but it also applies to Windows XP Pro.
     
  11. o0RaidR0o

    o0RaidR0o OSNN Addict

    Messages:
    119
    Location:
    S.E. Florida
    Instead of choosing C$ as your share, choose simply "C" that will at least make the share non-administrative, and force login to share.

    Hope this helps.