Administrator Share Drives
Dear all,
We have windows 2008 server with 64 bit it is working fine . i have a problem with sharing folder and drive
for example we have two domain users like PC1 and PC2 PC1 ip address 192.168.81.102
PC2 ip address 192.168.77.103 both PC's have a 3 drives drive ( "C" "D" and "E" ) both PC's member of domain . here i have a problem live PC1 users they can access PC2 all drives .
i don't want to access all drive only sharing folders they can access other drive i don't want to access .
When i restart to pc it can be Enabled Automatically why ? i want to permantly to stop the administrator $ share how ?
pls any help me.
Advance thanks
Subash
April 26th, 2012 1:24pm
Hello,
do you talk about the administrative shares on the client machines or the server, not complete clear for me? Anyway please see here about the different OS versions:
http://support.microsoft.com/kb/314984 http://support.microsoft.com/kb/816524
http://support.microsoft.com/kb/954422Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://msmvps.com/blogs/mweber/
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
April 26th, 2012 1:33pm
Dear Boss,
We have windows 2008 server 64bit with domain controller . we have many groups and users
I want to restrict
administrative shares via group policy users PC's .
Regards
Subash
April 26th, 2012 2:30pm
Administrative' share are only accessible if the user is in the local's admin group, or domain's admin group.MCP | MCTS 70-236: Exchange Server 2007, Configuring
Free Windows Admin Tool Kit Click here and download it now
April 26th, 2012 2:35pm
You can use group policies to disable administrative shares by registry updates: http://www.petri.co.il/disable_administrative_shares.htm
More here: http://blogs.technet.com/b/askds/archive/2007/08/14/deploying-custom-registry-changes-through-group-policy.aspx
This
posting is provided "AS IS" with no warranties or guarantees , and confers no rights.
Microsoft
Student Partner 2010 / 2011
Microsoft
Certified Professional
Microsoft
Certified Systems Administrator: Security
Microsoft
Certified Systems Engineer: Security
Microsoft
Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration
Microsoft
Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration
Microsoft
Certified Technology Specialist: Windows Server 2008 Applications Infrastructure, Configuration
Microsoft
Certified Technology Specialist: Windows 7, Configuring
Microsoft
Certified Technology Specialist: Designing and Providing Volume Licensing Solutions to Large Organizations
Microsoft
Certified IT Professional: Enterprise Administrator
Microsoft Certified IT Professional: Server Administrator
Microsoft Certified Trainer
April 26th, 2012 2:36pm
Dear Boss,
The user Domain Admin group
Free Windows Admin Tool Kit Click here and download it now
April 26th, 2012 2:43pm
Dear Boss,
Link is not working ???
April 26th, 2012 2:44pm
Dear Boss,
The user Domain Admin group
Hello,
if they are domain admin you can configure what you like, either with GPO or local, they still can REVERT the configuration becuase they are domain admin.Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://msmvps.com/blogs/mweber/
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
Free Windows Admin Tool Kit Click here and download it now
April 26th, 2012 2:48pm
Dear Boss,
Link is not working ???
Links posted by Mr X are working properly !!!
First link - has info on how to disable Admin shares
second link - Deploying Custom Registry Changes through Group Policy
You need to refer both the links and apply group policy as appropriate.
and Yes, suggestions given by Yagmoth555 and Meinolf, both are correct.
Also, please refer following discussion for more details
How can we disable the automatic administrative share $ by Group Policy
http://social.technet.microsoft.com/Forums/en-US/winservergen/thread/251f0f40-ffbf-4441-ba35-3dd1acd7a445/A UNIVERSE without WINDOWS is CHAOS !
This posting is provided "AS IS" with no warranties or guarantees and confers no rights.
About Me !!!
April 26th, 2012 9:39pm
second link - Deploying Custom Registry Changes through Group Policy
I want Second option via Group policy how to restrict to administrator sharing drives .
Regards
Subash
Free Windows Admin Tool Kit Click here and download it now
May 6th, 2012 3:50am
second link - Deploying Custom Registry Changes through Group Policy
I want Second option via Group policy how to restrict to administrator sharing drives .
Regards
Subash
Hello,
as said before you can NOT restrict admins.Best regards
Meinolf Weber
MVP, MCP, MCTS
Microsoft MVP - Directory Services
My Blog: http://msmvps.com/blogs/mweber/
Disclaimer: This posting is provided AS IS with no warranties or guarantees and confers no rights.
May 6th, 2012 6:00am