Date:        1/8/98 12:17:53 PM
From:        Adrian Rich <A.N.Rich@leeds.ac.uk>
Subject:     Re: [NTSEC] Removing standard shares
To:          ("Tony Haw <tonyhaw@rocketmail.com>"@LOCAL)
To:          ("<ntsecurity@iss.net>"@LOCAL)

TO UNSUBSCRIBE: email "unsubscribe ntsecurity" to majordomo@iss.net
Contact ntsecurity-owner@iss.net for help with any problems!
---------------------------------------------------------------------------

Tony,

This is how you do it (courtesy of http://www.jsiinc.com/reghack.htm (tip
number 96)):


By default, if you delete the C$, D$, etc.. Administrative shares, they will
be recreated when you reboot. To disable this feature, edit:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Paramaters

Double click on AutoShareServer and set it to 0 to disable it for a server.
Double click on AutoShareWks and set it to 0 to disable it for a
workstation.
If the entries are not present, Add Value of type REG_DWORD. The Range is 0
(disable) or 1 (enable - the default).

HTH,
Adrian.


-----Original Message-----
From: Tony Haw <tonyhaw@rocketmail.com>
To: ntsecurity@iss.net <ntsecurity@iss.net>
Date: 08 January 1998 15:29
Subject: [NTSEC] Removing standard shares


>
>TO UNSUBSCRIBE: email "unsubscribe ntsecurity" to majordomo@iss.net
>Contact ntsecurity-owner@iss.net for help with any problems!
>---------------------------------------------------------------------------
>
>
>Hi, I remember seeing somewhere that the standard NT
>admin shares "C$" etc. could be disabled.  Does
>anyone know how?  For the life of me I can't remember
>when or where I saw it.
>
>Thanks.
>
>Tony Haw
>_________________________________________________________
>DO YOU YAHOO!?
>Get your free @yahoo.com address at http://mail.yahoo.com
>
>