Windows 2000 default hard drive shares

[spoogenet]

Is there any negative consequence to un-sharing the default shares for the hard drives (C$, D$, etc.)?

I seem to remember this being an issue in NT4, although I'm not positive that it was. I would like to un-share them so they cannot be accessed from the network, period (assuming no other "features" are found...).

Thanks for any helpful info.

b

[EchoWars]

AFAIK, you can't un-share it, and don't want to. It is an administrative share that is set up by the op-system. You cannot connect to it from the net, so don't sweat it.

[spoogenet]

That's what I am thinking, and that's why I want to ask.

However I do believe you can connect to it via the net, assuming the default permissions of Everyone having full permissions are enabled. \\computername\C$ should bring it up.

I guess I haven't tried it with anyone else's machine, but I do believe that if you know the password then you can connect to it.

Edit:
Update, I'm not so sure that it can really be accessed by anybody else....Oh well, I would just like more info from someone who knows much more about this than me....

b

[This message has been edited by spoogenet (edited 27 February 2001).]

[FrankDC]

A remote user would have to be setup as an Administrator or Backup Operator on your system. Otherwise they cannot access the administrative shares. Period.

Press F1 and read the help screens under 'Special shares'.

[Sisyfos]

Administrative Tools -> Local Security Policy -> Local Policies -> User Rights Assignment
Dobbeltclick "Access this computer from the network" and uncheck the boxes.

This is assuming you're not in a domain, that overrides your local policy settings.

[spoogenet]

Ah, I remember reading all the help files and finding them not as helpful as I had desired.

I might cut off all access through the network, although I think I would like to allow limited access. I will have to decide what I want.

But if I don't have to worry 'bout other computers connecting to my default shares, then I won't worry so much about it.

Thanks for the help....

b

[DarkSyd]

I yoinked em off of my two machines a long time ago. No ill effects so far.

------------------
Games Box
--------------
Windows 2000Pro, ASUS A7Pro, Duron 750@950, 192MB Micron PC133, OEM Radeon DDR, 15gb Quantum Fireball+ LM, Fujitsu 5.25gb, Pioneer 32x slot load CDROM, SB Live! Value, LinkSys LNE100, Altec Lansing ACS45.2, Samsung Syncmaster 955DF, Sycom 300va UPS

Video Box
------
Windows 2000Pro, PIII700 on ASUS CUBX, 256mb Micron PC133, Vanilla G400/32 (PD5.14), Hauppage WinTV-DBX, LinkSys LNE100, 8.4gb Maxtor HD, 40gb 7200 Western Digital, Diamond Fireport 40 SCSI, Pioneer 32x SCSI Slot load CDROM, Pioneer 10x Slot load DVD, Yamaha 4416s burner, MX300, Panasonic Panasync S70

Feline Tech Support
-------------
Jinx the Grey Thundercat, Mischa (Shilsner?)(still MIA)

...currently working on the world's first C64 based parallel computing project

[fds]

<font face="Verdana, Arial, Helvetica" size="2">
I yoinked em off of my two machines a long time ago. No ill effects so far.
</font>

I believe Windows 2000 (and NT4) recreates these administrative shares automatically anyway the next time you reboot.

Unless you changed a registry setting I don't remember, which stops the OS from recreating them.

[spoogenet]

Yeah, I was reading up on this stuff a little. There are registry keys that you can use to disable the default shares. It is touted as a measure to increase security, but warned against because it can supposedly cause some programs to have issues.

b

[DarkSyd]

lol fds...
you're right...they are back again