Tech Tips / Windows NT / Security

Permanently disable the Hidden Administration shares

The C$, D$, etc. shares can pose a security risk on your systems, since they're widely known among NT crackers. The problem is that when you delete these shares, they're re-created after every reboot. To disable the shares altogether, open the registry editor and change the value of the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\AutoShareServer subkey to 0. (For workstations, the subkey is AutoShareWks.)

Note: Please remember that working with the registry does include risks, so make sure you have a verified backup before beginning.

Contact Us | Authors | Subject Index | Directory | RSS Feeds

Copyright ©2006