How to remove administrative shares in Windows Server 2008

How to remove administrative shares in Windows Server 2008

Article ID : 954422
Last Review : July 10, 2008
Revision : 1.0
On This Page

INTRODUCTION

This step-by-step article describes how to remove default administrative shares, and how to prevent these shares from being automatically created in Windows Server 2008.

Back to the top

MORE INFORMATION

By default, Windows Server 2008 automatically creates special hidden administrative shares that administrators, programs, and services can use to manage the computer environment or network. These special shared resources are not visible in Windows Explorer or in My Computer. However, you can view them by using the Shared Folders tool in Computer Management. Depending on the configuration of your computer, you may see some or all of the following special shared resources listed in the Shares folder in Shared Folders:

• DriveLetter$: This is a shared root partition or volume. Root partitions and volumes that are shared appear as the drive letter name appended with the dollar sign ($). For example, when drive letters C and D are shared, they appear as C$ and D$.
• ADMIN$: This is a resource that is used during remote administration of a computer.
• IPC$: This is a resource that shares the named pipes that you must have for communication between programs. This resource cannot be deleted.
• NETLOGON: This is a resource that is used on domain controllers.
• SYSVOL: This is a resource that is used on domain controllers.
• PRINT$: This is a resource that is used during the remote administration of printers.
• FAX$: This is a shared folder on a server that is used by fax clients during fax transmission.

Note NETLOGON and SYSVOL are not hidden shares. Instead, these are special administrative shares.

Generally, we recommend that you do not modify these special shared resources. However, if you want to remove the special shared resources and to prevent them from being created automatically, you can do this by editing the registry.

Back to the top

To remove administrative shares by editing the registry

Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:

322756 (/Feedback.aspx?kbNumber=322756/) How to back up and restore the registry in Windows

To remove administrative shares and to prevent them from being automatically created in Windows Server 2008, follow these steps:

1. Click Start, click Run, type regedit, and then click OK.
2. Locate and then click the following registry subkey:

HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Services LanmanServer Parameters

Note The AutoShareServer registry entry must be set to the REG_DWORD type. When this value is set to 0 (zero), Windows Server 2008 does not automatically create administrative shares. This does not apply to the IPC$ share or to shares that you create manually.

3. In the Details pane, click AutoShareServer.
4. On the Edit menu, click Modify. In the Value data box, type 0, and then click OK.
5. Exit Registry Editor, and then restart the computer.

Note If the AutoShareServer registry entry does not exist, follow these steps to create it:

a. Locate and then click the following subkey in the registry:

HKEY_LOCAL_MACHINE SYSTEM CurrentControlSet Services LanmanServer Parameters
b. On the Edit menu, point to New, and then click DWORD (32-bit) Value.
c. Type AutoShareServer, and then click OK.
d. Double-click AutoShareServer, type 0, and then click OK.
e. Exit Registry Editor, and then restart the computer.

Back to the top

REFERENCES

For more information about how to manage shared resources by using Shared Folders in Windows Server 2008, see Shared Folders Help. To view the Share Folders Help files, click Start, point to Administrative Tools, and then click Computer Management. In the console tree, right-click Shared Folders, and then click Help.

Back to the top


APPLIES TO
• Windows Server 2008 Standard
• Windows Server 2008 Enterprise
• Windows Server 2008 Datacenter
• Windows Server 2008 Standard without Hyper-V
• Windows Server 2008 Enterprise without Hyper-V
• Windows Server 2008 Datacenter without Hyper-V
• Windows Server 2008 for Itanium-Based Systems

Back to the top

Keywords: 
kbinfo kbexpertiseadvanced kbhowto KB954422

Back to the top

 

Microsoft Knowledge Base Article

This article contents is Microsoft Copyrighted material.
Microsoft Corporation. All rights reserved. Terms of Use | Trademarks


You can follow any responses to this entry through the RSS 2.0 feed. You can leave a response, or trackback from your own site.

AddThis Social Bookmark Button

Leave a Reply

*
To prove that you're not a bot, enter this code
Anti-Spam Image