Disabling Administrative Shares

Archived from groups: microsoft.public.windowsxp.perform_maintain (More info?)

I hope I am posting to the appropriate new group - I wasn't certain if this
would be a XP issue or a 2000/2003 server issue...

I am attempting to secure a XP workstation connected to a 2003 Server based
domain. The workstation (belonging to the CEO) has private information that
should not be accessible by anyone including the network administrator. I
have disabled remote desktop and have added the key
System\CurrentControlSet\Services\LanManServer\Parameters\AutoShareWks=0 to
HKLM. I have also disabled the remote registry service.

I would like some further information: A.) Could these settings be
over-ridden via GPO? B.) Could these settings be modified if remote
profile is being used and the user is logging into different workstations
with the same account?

Thanks in advance for any advice.

Cary Kataoka (caryk@cjrk.com)
CJRK Computer Consulting Inc.