How to Prevent the Creation of Administrative Shares on Windows NT Server 4.0 (288164)


The information in this article applies to:

  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Professional
  • Microsoft Windows NT Workstation 4.0
  • Microsoft Windows NT Server 4.0
  • Microsoft Windows XP Professional
This article was previously published under Q288164

SUMMARY

IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry



This article explains how to prevent creation of the administrative shares on Microsoft Windows NT Server 4.0.

MORE INFORMATION

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.


Create values for AutoShareServer and AutoShareWks:
  1. In the registry, locate the following key:
    HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters
  2. On the Edit menu, click Add Value.
  3. Type AutoShareServer, click REG_DWORD, and then click OK.
  4. Type 0, and then click OK.
  5. On the Edit menu, click Add Value.
  6. Type AutoShareWks, click REG_DWORD, and then click OK.
  7. Type 0, and then click OK.Note: Sometimes the values are already present, especially after use of a policy that affects these entries. In addition, on Windows 2000 you are not required to add the AutoShareWks value.

  8. Quit the registry, and then restart the computer.
This process can easily be done through a policy. The path for the system policy is System Policy Editor\Windows NT Network\Sharing\Create Hidden Drive Shares.

For additional information about hidden administrative shares that are not created, click the article number below to view the article in the Microsoft Knowledge Base:

156365 Hidden Shares Are No Longer Available After Using System Policy

Modification Type:MajorLast Reviewed:5/29/2003
Keywords:kbinfo KB288164
©2002 Microsoft Corporation. All rights reserved.