When you install a Windows Operating System, every drive on your computer (C, D, E, etc.) are hidden and available for domain administrators.

To increase your computer security, is recommended to disable all these administrative shares.

Disable administrative shares temporarily

Right click on My Computer -> Manage


On Shared Folders section –> Shares, you can see your drives followed by $ sign -> Right Click -> Stop Sharing


After computer restart, all these administrative shares will be available again.

Disable administrative shares permanently

Start – > Run -> regedit command


For Windows 2000 / Windows XP / Windows 7 workstations:

Go on  HKEY_LOCAL_MACHINE -> SYSTEM -> CurrentControlSet -> Services -> LanmanServer -> Parameters and create a new key. Name: AutoShareWks, Data Type:  REG_DWORD,  Value: 0


For Windows 2000/2003 Server:

Go on HKEY_LOCAL_MACHINE -> SYSTEM -> CurrentControlSet -> Services -> LanManServer -> Parameters and create a new key. Name: AutoShareServer Data Type: REG_DWORD, Value: 0.

All these settings will be available after computer restart.

To enable again administrative shares, you can change values for these keys from 0 to 1.

(Visited 205 times, 1 visits today)
How to disable administrative shares on Windows
Tagged on: