How to remove administrative shares in Windows Server 2008
Comments Off Symptoms
This article describes how to remove default administrative shares, and how to prevent these shares from being automatically created in Windows Server 2008.
Resolution
By default, WindowsServer 2008 automatically creates special hidden administrative shares that administrators, programs, and services can use to manage the computer environment or network. These special shared resources are not visible in Windows Explorer or in My Computer. However, you can view them by using the Shared Folders tool in Computer Management. Depending on the configuration of your computer, some or all of the following special shared resources may be listed in the Shares folder in Shared Folders:DriveLetter$: This is a shared root partition or volume. Shared root partitions and volumesare displayed as the drive letter name appended with the dollar sign ($). For example, when drive letters C and D are shared, they are displayedas C$ and D$.ADMIN$: This is a resource that is used during remote administration of a computer.IPC$: This is aresource that shares the named pipes that you must have for communication between programs. This resource cannot be deleted.NETLOGON: This is a resource that is used on domain controllers.SYSVOL: This is a resource that is used on domain controllers.PRINT$: This is a resource that is used during the remote administration of printers.FAX$: This is a shared folder on a server that is used by fax clients during fax transmission.Note NETLOGONandSYSVOLare not hidden shares. Instead, these arespecial administrative shares.
Generally, we recommend that you do not modify these special shared resources. However, if you want to remove the special shared resources andprevent them from being created automatically, you can do this by editing the registry.
Remove administrative shares by editing the registryTo have us do this for you, go to the “Fix it for me” section. If you would rather fixthis problem yourself, go to the “Let me fix it myself” section.
Fix it for meTo fix this problem automatically, click the Fix this problem link. Then, click Run in the File Download dialog box, and follow the steps in thiswizard.
a.button {background: url(/library/images/support/KBGraphics/PUBLIC/cn/FixItButton.jpg) no-repeat 0 0;width: 139px;height: 56px;display:block;cursor:pointer;}a.button:hover {background-position: bottom right;}Fix this problem
Microsoft Fix it 50184
NotesThis wizard may be in English only; however, the automatic fix also works for other language versions of Windows.If you are not on the computer that has the problem, you can save the automatic fix to a flash drive or to a CD, and then you can run it on the computer that has the problem. Now go to the “Did this fix the problem?”section.
Let me fix it myselfImportantThis section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756?(http://support.microsoft.com/kb/322756/)How to back up and restore the registry in WindowsTo edit the registry, follow these steps:Click Start, click Run, typeregedit, and then click OK.Locate and then click the following registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\ParametersNoteTheAutoShareServerregistry entrymust be set to the REG_DWORD type. When this value is set to 0 (zero), WindowsServer 2008does not automatically create administrative shares. This does not apply to the IPC$ share or to shares that you create manually.In the details pane, clickAutoShareServer.On the Edit menu, click Modify. In the Value data box, type0, and then click OK.Exit Registry Editor, and then restart the computer.Note If the AutoShareServer registry entry does not exist, follow these steps to create it:Locate and then click the following subkey in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\ParametersOn the Edit menu, point to New, and then click DWORD (32-bit) Value.Type AutoShareServer, and then click OK.Double-click AutoShareServer, type 0, and then click OK.At the command prompt, type net stop srvnet, and then press ENTER.
Note When you are prompted, type y, and then press ENTER to stop the services that depend on the Srvnet service Type exit, and then press ENTER to close the Command Prompt window.Now go to the “Did this fix the problem?”section. Did this fix the problem?Check whether the problem is fixed. If the problem is fixed, you are finished with this article.If the problem is not fixed, you can contact support(http://support.microsoft.com/contactus).
