2k hdd shared at boot

Is there a way to stop sharing the hard drive other than having to go into the windows explorer on every boot and unshare it?

 

None that I'm aware of. The administrative share is created at startup time if it isn't already there.

What are you trying to do - or have others not be able to do?

 

I have users that when they boot their pc, they're hdd's are open to the entire network. They have passwords and usernames at logon. They have to physically go into the windows explorer and uncheck the "do not share this folder" option, on the c: drive. I've been doing alot of reading, and it all leads me to computer management. In the shared folders, shares option, it shows all the drives available throughout the network. You can unshare the drives, however-and it states when you unshare them-that the drives will be available again after re-boot. Any further info would help tremendously.....tx

 

If you wish to permanetly disable Administrative shares then just go into Management and disable as you have been doing. This alone and they will come back after a reboot.

But do this to make it permanent.

regedit to the following key

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters\AutoShareServer

export this key to save it

then change the value of AutoShareServer to 0 (zero)

the above is for server

for a client it will be \AutoShareWks also change it to 0.

Reboot

Wa La.

Mike

 

Nice Mike. Never knew that one.

Suzette - the shares we are talking about are the C$, D$, etc. administrative shares and even though they are certainly there, no one should be able to use them over the network to access the drive unless they are either a member of the local administrator's group on the PC or, if you run a domain, if they have a domain admin account.

Ordinary network users shouldn't be able to open anything except a normal share that they have permissions to use. Even local users on the PC should have very limited permissions for these shares. Local admin and local power users group members will have more.

And I'd try Mike's fix on only a PC or two at first since disabling this share may have some effects you don't anticipate.

When you said "I have users that when they boot their pc, they're hdd's are open to the entire network. " it indicated to me that something isn't set up correctly on your network.

You didn't specify domain or peer workgroup. Also no idea if you use NTFS or FAT32 file structure. Both of these will cause different behaviors.

If you'd like to provide more information, we can try to figure out what is wrong and how to correct it.

 

10-4 Newt that is why I reminded her to export the Key so she can put it back.

Won't effect much. Might be handy if eveyrone is an administrator! Lol!

mike

 

Newt & Mike! You guys are great!! Really appreciate the excellant responses and knowledge shared! I am recommending this site to other IT's I know. "Love this site" only cuz of you two!

I'm currently not at work....(usually 8-5 m/f), you know. My company is an entity of their own and we have every flavor o/s that's out there....even 3.1.....;( Each user, when they receive a new pc, is entitled to setup their pc as they need/wish. Therefore, I'm there to support all the boo-boos that they create. Makes it difficult at times and that's why I'm here....
Even Support needs support!

I will definately give your suggestions a try when I return on Tuesday. I am familar with exporting the reg. And yes I do work with all flavors of "fat ". Yes, we're on a domain. Our Network Admin is great with the server. I'm the pc guru.

Love this site. I will return.
Suzette
http://www.fsec.ucf.edu

 

LOL - Suzette, I just checked the url in your signature. If you not only have to support PCs but PCs operated by scientific types then I hope they are paying you a bunch of money.

With the Domain information meaning any XP boxes you have will be XP-Pro, may I strongly suggest you make sure that Simple File Sharing is not checked and that no one has enabled the Guest account on any NT OS (NT4/2k/XP). Those two things will open up lots of security holes and neither you nor your users need that.

 

LOL - Mr. Newt....

Thanks for the tickle... Yes, you are correct. They are an enjoyable bunch to work for. They keep me going like the bunny.

I will definately look into "all "...;( computer's Simple File Sharing and that their "guests" accounts. Gonna be busy the next few days--weeks....wanna help me?

BTW, I downloaded your "tweak for xp" at home here and made some really goofy adjustments just to lock myself out. However, I've found and fixed-----helps when you read-----and use glasses if you need them too!

Thanks for all your help! Suzette