c$

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

hi,
dear can u help how to disable the C$ i know the C$ is a default sharing,i
need how to disable it to apply all the user in the domain by use such as
group policy or another way.
Thanks in advance.

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

The C$ is available only for a user that is a local administrator on the
computer and can come in quite useful. The administrative shares can be
safely disabled on most computers [not domain controllers] or you can
disable file and print sharing or the server service on computers that you
have not need to offer any shares or be managed remotely via Computer
Management and other tools that use SMB. The server service can be easily
disabled via Group Policy. The best solution may be to modify the user
rights for access this computer from the network to include only the
users/groups that you want to be able to access any shares on a computer. If
for instance your domain users are members of the local administrators group
on domain computers and you are having problems with some users accessing
other domain computers via the C$ share you could put those computers into
an OU and configure a Group Policy linked to that OU so that the user right
for access this computer from the network contains only domain admins. The
link below shows how to do a registry change to disable administrative
shares if that is what you want to do but be sure to read the other
pertinent info. You could implement such a change with a Group Policy
"startup" script. --- Steve

http://www.petri.co.il/disable_administrative_shares.htm

"ANAS" <ANAS@discussions.microsoft.com> wrote in message
news:4B1723B2-7D9D-4C71-B79C-32D9578432ED@microsoft.com...
> hi,
> dear can u help how to disable the C$ i know the C$ is a default sharing,i
> need how to disable it to apply all the user in the domain by use such as
> group policy or another way.
> Thanks in advance.

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

> The C$ is available only for a user that is a local administrator on the
> computer and can come in quite useful. The administrative shares can be

The above is technically accurate (sort of) but implies that the
domain admins are not included, which they are.

Technically, domain admins ARE "local administrators" (if not THE
local adminstrator) of the computers which are members of the domain.

Doman Admins can use C$ etc.$ also.

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Thanks for clarifying that Herb and of course you are correct and is one of
the reasons why I thought that he might want to rethink disabling the admin
shares since domain admins can often find them useful. -- Steve


"Herb Martin" <news@LearnQuick.com> wrote in message
news:%23YXcHxRbFHA.1600@tk2msftngp13.phx.gbl...
>> The C$ is available only for a user that is a local administrator on the
>> computer and can come in quite useful. The administrative shares can be
>
> The above is technically accurate (sort of) but implies that the
> domain admins are not included, which they are.
>
> Technically, domain admins ARE "local administrators" (if not THE
> local adminstrator) of the computers which are members of the domain.
>
> Doman Admins can use C$ etc.$ also.
>
>

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

Steven L Umbach wrote:
> Thanks for clarifying that Herb and of course you are correct and is one of
> the reasons why I thought that he might want to rethink disabling the admin
> shares since domain admins can often find them useful. -- Steve
>
>
> "Herb Martin" <news@LearnQuick.com> wrote in message
> news:%23YXcHxRbFHA.1600@tk2msftngp13.phx.gbl...
>
>>>The C$ is available only for a user that is a local administrator on the
>>>computer and can come in quite useful. The administrative shares can be
>>
>>The above is technically accurate (sort of) but implies that the
>>domain admins are not included, which they are.
>>
>>Technically, domain admins ARE "local administrators" (if not THE
>>local adminstrator) of the computers which are members of the domain.
>>
>>Doman Admins can use C$ etc.$ also.
>>
>>
>
>
>
We find the administrative shares very useful on our network - we
connect to local workstation hard drives over the network all the time
to look at stuff.

 

[Guest]

Archived from groups: microsoft.public.win2000.security (More info?)

"=?Utf-8?B?QU5BUw==?=" <ANAS@discussions.microsoft.com> wrote in
news:4B1723B2-7D9D-4C71-B79C-32D9578432ED@microsoft.com:

> hi,
> dear can u help how to disable the C$ i know the C$ is a default
> sharing,i need how to disable it to apply all the user in the
> domain by use such as group policy or another way.
> Thanks in advance.

Disable File and Print Sharing on each PC. You'll probably have to use
a script: I don't think you can set that in Group Policy.

Adam