Some organizations do not want to enable administrative
shares. However, when enable the remote registry service, the server
service is started and administrative shares are enabled.
About this task
To disable administrative shares, modify the following
registry key:
Procedure
-
Click and type regedit.
-
Go to the key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\
-
Set the AutoShareWks parameter to 0.
Note: This action does not disable the IPC$ share. Although
this share is not used to access files directly, ensure that anonymous
access to this share is disabled. Alternatively, you can remove the
IPC$ share completely by deleting it at start-up by using the following
command:
net share IPC$ /delete
Use
this method to remove the C$ and D$ shares also.