When you install a Windows Operating System, every drive on your computer (C, D, E, etc.) are hidden and available for domain administrators.

To increase your computer security, is recommended to disable all these administrative shares.

Disable administrative shares temporarily

Right click on My Computer -> Manage

my-computer

On Shared Folders section –> Shares, you can see your drives followed by $ sign -> Right Click -> Stop Sharing

computer-management

After computer restart, all these administrative shares will be available again.

Disable administrative shares permanently

Start – > Run -> regedit command

regedit

For Windows 2000 / Windows XP / Windows 7 workstations:

Go on  HKEY_LOCAL_MACHINE -> SYSTEM -> CurrentControlSet -> Services -> LanmanServer -> Parameters and create a new key. Name: AutoShareWks, Data Type:  REG_DWORD,  Value: 0

registry-editor

For Windows 2000/2003 Server:

Go on HKEY_LOCAL_MACHINE -> SYSTEM -> CurrentControlSet -> Services -> LanManServer -> Parameters and create a new key. Name: AutoShareServer Data Type: REG_DWORD, Value: 0.

All these settings will be available after computer restart.

To enable again administrative shares, you can change values for these keys from 0 to 1.

(Visited 165 times, 1 visits today)
How to disable administrative shares on Windows
Tagged on:         

Leave a Reply

Your email address will not be published. Required fields are marked *