How do I stop the hidden Autoshares?

[dcxman 0]

Morning all.

 

I've got a Win2K and a XP box that I'm trying to make secure but for the life of me I can't stop the C$ autoshare from starting up and coming back after reboot. How the hell do I stop it? I'm pretty much gettin frustrated with Microsoft at this point.

 

Thanks in advance either way.

[Sampson 0]

I think that it takes a registry edit for W2K: [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\lanmanworkstation]

 

and create the AutoShareWKS field with a value of 0.

 

Microsoft talks about it here - at least for NT: http://support.microsoft.com/directory/article.asp?ID=KB;EN-US;Q288164

[dcxman 0]

Excellent info Sampson.

 

I just had one other question concerning this registry modification. I noticed that these new values not only remove the C$ share but the ADMIN$ share as well. I was just wondering what effect would that have on a Win2K Adv Server Domain Controller running AD services?

 

Thanks so much Sampson either way.

[Sampson 0]

I didn't have a problem. At the same time, I didn't test it all that thoroughly. I was after security at the time.

[dcxman 0]

Understood.

 

I am after the same type of security.

 

Thanks again.

[duhmez 0]

dcxman

 

I've not tried this in a domain model, but I would guess that it would probably toast the whole setup. This of course, is just a guess. Give it a shot and let us know