Hello,
Reference thread # 21593753
The accepted resolution from Naser72 was:
"Disable the administrative share
Every Windows NT machine automatically creates a share for each drive on the system. These shares are hidden, but available with full control to domain administrators. The drive letter, followed by the $ sign is the name, and it is shared from the root. When trying to attain a highly secure network, you may wish to address this potential security issue by disabling these shares, or at least restricting their permissions to specific users or services.
It is possible to simply remove the share from Server Manager, in the same way that you would remove any share (computer menu, Shared Directories, Stop Sharing). The problem with this method is that the shares will automatically be recreated when the machine reboots. In order to disable these shares permanently, a registry edit will be necessary. Before making changes of this type to the registry, it is a good idea to make sure the registry has been backed up recently.
For NT Servers, the change is:
Hive: HKEY_LOCAL_MACHINE
Key: SYSTEM\CurrentControlSet\Services\LanManServer\Parameters
Name: AutoShareServer
Data Type: REG_DWORD
Value: 0
For NT Worstation, the change is:
Hive: HKEY_LOCAL_MACHINE
Key: SYSTEM\CurrentControlSet\Services\LanManServer\Parameters
Name: AutoShareWks
Data Type: REG_DWORD
Value: 0
A reboot is necessary for this to take effect."
Thanks,
Kelly W.
