Disabling default share (NT/W2K)
-
Unfortunately, that doesn't let me unshare anything, even though I have admin privs. Also, it shows only 2 drives and IPC$ even though I have 9 drives on the system. /ravi "There is always one more bug..." http://www.ravib.com ravib@ravib.com
Hmm... I am pretty sure you could do it under NT4, but I guess they've changed it since... Did you try MS KB?
-
Unfortunately, that doesn't let me unshare anything, even though I have admin privs. Also, it shows only 2 drives and IPC$ even though I have 9 drives on the system. /ravi "There is always one more bug..." http://www.ravib.com ravib@ravib.com
Try removing all priveleges for the shares on the groups you want to exclude. I've only been using Win2KS for a month or so, but it seems to adhere very tightly to the model of "assign users to groups; assign priveleges to groups." Create special access groups for those users you want to share resources with, and allow only those groups access. Ravi Bhavnani wrote: Unfortunately, that doesn't let me unshare anything, even though I have admin privs. That's weird! You can't delete a group from the access list? I haven't run into that...
-
Nish [BusterBoy] wrote: What are the default shares? If your NT/2K machine is called "foo" and you have no drives explicitly shared, do the following from another machine on the network:
- Start -> Run...
- In the "Open" box, type \\foo\C$.
- :(
/ravi "There is always one more bug..." http://www.ravib.com ravib@ravib.com
I did that It prompts for username/password. Nish Sonork ID 100.9786 voidmain www.busterboy.org If you don't find me on CP, I'll be at Bob's HungOut
-
Unfortunately, that doesn't let me unshare anything, even though I have admin privs. Also, it shows only 2 drives and IPC$ even though I have 9 drives on the system. /ravi "There is always one more bug..." http://www.ravib.com ravib@ravib.com
Come on Ravi. It's not a security hole. I mean it won't let anyone in without an username and passwd Nish Sonork ID 100.9786 voidmain www.busterboy.org If you don't find me on CP, I'll be at Bob's HungOut
-
Is there any way to disable the default shares that NT and W2K (and perhaps XP?) set up on a networked PC? /ravi "There is always one more bug..." http://www.ravib.com ravib@ravib.com
REGEDIT4 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters] "AutoShareServer"=dword:00000000 "AutoShareWks"=dword:00000000 have fun... JK :cool:
-
REGEDIT4 [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters] "AutoShareServer"=dword:00000000 "AutoShareWks"=dword:00000000 have fun... JK :cool:
Thanks, I'll try it!! /ravi "There is always one more bug..." http://www.ravib.com ravib@ravib.com
-
Come on Ravi. It's not a security hole. I mean it won't let anyone in without an username and passwd Nish Sonork ID 100.9786 voidmain www.busterboy.org If you don't find me on CP, I'll be at Bob's HungOut
A username and password are not required if other users share security attributes maintained by a global server. At work, everyone can see everybody elese's machine. It's a real pain to have to unshare my drives (except my public folder) everytime I boot up. /ravi "There is always one more bug..." http://www.ravib.com ravib@ravib.com
-
I did that It prompts for username/password. Nish Sonork ID 100.9786 voidmain www.busterboy.org If you don't find me on CP, I'll be at Bob's HungOut
Hmmm, it may be a facet of how we're setup at my workplace. See this reply to your note. /ravi "There is always one more bug..." http://www.ravib.com ravib@ravib.com
-
A username and password are not required if other users share security attributes maintained by a global server. At work, everyone can see everybody elese's machine. It's a real pain to have to unshare my drives (except my public folder) everytime I boot up. /ravi "There is always one more bug..." http://www.ravib.com ravib@ravib.com
Ravi Bhavnani wrote: A username and password are not required if other users share security attributes maintained by a global server. At work, everyone can see everybody elese's machine. Does it mean the everyone is Domain Admin? :eek:
-
Hmmm, it may be a facet of how we're setup at my workplace. See this reply to your note. /ravi "There is always one more bug..." http://www.ravib.com ravib@ravib.com
Oh, maybe. I set up my win2k so that it is sorta stand-alone. Nish Sonork ID 100.9786 voidmain www.busterboy.org If you don't find me on CP, I'll be at Bob's HungOut
-
Is there any way to disable the default shares that NT and W2K (and perhaps XP?) set up on a networked PC? /ravi "There is always one more bug..." http://www.ravib.com ravib@ravib.com
Setting the "RestrictAnonymous" registry setting to 2 will disable access to the machine to anyone without local user rights. I think this is what you really want (since this will still give you (and only you) access to the default shares). Have a look at How to Use the RestrictAnonymous Registry Value in Windows 2000 (Q246261). Cheers, -Oz --- Grab WndTabs from http://www.wndtabs.com to make your VC++ experience that much more comfortable...
-
What are the default shares? I am on Win2K server. My problem is that I can't get the Win98 users here to access any share on my machine without creating a userid for them. Nish Sonork ID 100.9786 voidmain www.busterboy.org If you don't find me on CP, I'll be at Bob's HungOut
Enabling the guest account will allow the Win98 users to access the shares without having an userid on the server. Of course, that carries some security implications with it.
-
Is there any way to disable the default shares that NT and W2K (and perhaps XP?) set up on a networked PC? /ravi "There is always one more bug..." http://www.ravib.com ravib@ravib.com
I see some other good suggestions by editing the registry but the real simple way is to just delete them... net share ADMIN$ /delete net share IPC$ /delete net share C$ /delete I currently do this in a startup script but I do not actually delete the IPC$ share since I have not yet researched what would be affected if I did. This keeps me in TOTAL control of my PC. ;P ~Cliff
