• We’re currently investigating an issue related to the forum theme and styling that is impacting page layout and visual formatting. The problem has been identified, and we are actively working on a resolution. There is no impact to user data or functionality, this is strictly a front-end display issue. We’ll post an update once the fix has been deployed. Thanks for your patience while we get this sorted.

admin shares

B

BriGy86

Diamond Member
it seems my C drive is using an admin share, that is a security threat right?

what is the purpose of it? (perhaps because im trying to share the printer thats hooked up to my parents computer)

everytime i turn it off it says that it will be shared again when the server service is stopped and restarted (as far as i know i need the server service to share the printer connected to my parents computer

can anyone shed any light on this, i'd like to keep my C drive unshared and still use my parents printer
 
You could make a batchfile that deletes the shares at logon, if you like. Put it in the C:\Documents and Settings\ALL USERS\Start Menu\Programs\Startup directory. Here's one, although your antivirus software may freak and nuke it (McAfee ID's it as Tool/Nosh): shareBgon.bat <-- right-click and save it where I mentioned.

Bigger picture: got firewall and antivirus?
 
I've heard about folks disabling it on machines that are not sharing anything, but I'm not sure what all exactly it is required for. That said, I do know that I've been told repeatedly (after I asked similar questions) to just leave it alone, and make sure that the accounts on the machine are password protected.

The following Knowledge Base Article verifies that yes, autocreated admin shares are indeed recreated upon reboot or (server) restart:

http://support.microsoft.com/default.aspx?scid=kb;en-us;314984

But it doesn't say why. I do know that some programs require them, but I don't know of any off-hand that you would be using on your PC (but of course, I could be wrong).
 
thanks for the responses, as for antivirus im running trend micro's PC-cillian which has a fire wall and antivirus, my accounts are also password protected, so should i not really have anything to worry about?

edit: perhaps its because i have drives mapped on each computer

i could have sworn that i haven't seen the C drive shared on other computers, but i don't think that those other computers had drives from other computers mapped
 
Originally posted by: BriGy86
thanks for the responses, as for antivirus im running trend micro's PC-cillian which has a fire wall and antivirus, my accounts are also password protected, so should i not really have anything to worry about?

edit: perhaps its because i have drives mapped on each computer

i could have sworn that i haven't seen the C drive shared on other computers, but i don't think that those other computers had drives from other computers mapped
Click to expand...

Which OS were the other computers running? I don't believe that XP Home creates the shares, but I know that Pro does.
 
Out of curiosity, do your parents present a significant security threat? As in, they're prone to infecting their computer with worms and then it attacks your computer next?
 
both computers are running XP pro, on there computer i fixed them up with zone alarm firewall (free version) and AVG for antivirus, and a few freeware spyware apps. they also usually only use it for e mail (mostly business related) there user accound is also password protected
 
You need a valid admin account on the local machine to access the shares (with the exception of $IPC which I belive is used for remote desktop, that can be grabbed as guest or annon user so make sure they are disabled. I've been told a lot of crackers steal info to break into your machine this way). Basically they are worthless to any attacker unless they already have your admin user/pass. However most default installs of XP I come across do not have a password for the admin account. So keep that in mind.

well, if you want to disable them just do this.

Go into regedit.

then go to HKEY_LOCAL_MACHINE

and find this SYSTEM\CurrentControlSet\Services\LanManServer\Parameters

Then under AutoShareWks (you may have to add it, if you do its a DWORD) set it to 0.

Then delete your admin shares and reboot. They wont come back. It should not break anything, but if it does, go in and set that back to 1 and reboot and they will be back.
 
You must log in or register to reply here.

TRENDING THREADS

Back
Top