Hi ! this is my weird story i have windows 7 ultimate Sp1 and it is joined to a 2008 r2 domain it went through some updates from my WSUS server recently i have noticed a very serious dangerous condition there anyone (even not in domain) can connect to my windows using \\pcname (is not asked for any user and password and guest account is also disabled) and that connection is as administrator because it can simply go to my administrative shares (\\pcname\e$ or c$ ...) and share and session management shows the connected user : Administrator ....!!!! I noticed that my users folder is automatically shared to everyone (Full Permission) and after that i discovered this situation. the folder is still sharing automatically and the solution go to view folder options and uncheck share wizard did not work For now to prevent my info from being shared to every one i have disabled admin shares and also set users folder share to deny all can anybody tell me what is going here ??!!!

Hello, Please use Microsoft products with original licence key. Now, Download Windows 7 Enterprise 90-day Trial and test again. Here is download link: Windows 7 Enterprise 90-day Trial And, please don not ask me, how can you buy original licence key, because Microsoft does not have Support or Partner in Iran. Thanks for your understanding. Regards

Hello, Please use Microsoft products with original licence key. Now, Download Windows 7 Enterprise 90-day Trial and test again. Here is download link: Windows 7 Enterprise 90-day Trial And, please don not ask me, how can you buy original licence key, because Microsoft does not have Support or Partner in Iran. Thanks for your understanding. Regards

Hi Thanks for your answer but what is the problem in fact ? is this some kind of security hole which MS has intentionally put in windows 7 's which are not original or maybe it is due to a misconfiguration ? or it is some kind of fault (like many other faults) which can occur in a non-original windows and also what about the users folder which is automatically shared every time i restart windows ?

Hi Thanks for your answer but what is the problem in fact ? is this some kind of security hole which MS has intentionally put in windows 7 's which are not original or maybe it is due to a misconfiguration ? or it is some kind of fault (like many other faults) which can occur in a non-original windows and also what about the users folder which is automatically shared every time i restart windows ?

You can disable administrative shares. However, after that, if there is any management tools in your domain that will use administrative shares, they will not work. Refer to: How to remove administrative shares in Windows Server 2008 http://support.microsoft.com/kb/954422 Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

You can disable administrative shares. However, after that, if there is any management tools in your domain that will use administrative shares, they will not work. Refer to: How to remove administrative shares in Windows Server 2008 http://support.microsoft.com/kb/954422 Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread.

You can disable administrative shares. However, after that, if there is any management tools in your domain that will use administrative shares, they will not work. Refer to: How to remove administrative shares in Windows Server 2008 http://support.microsoft.com/kb/954422 Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Thanks Arthur I Knew how to disable that and i did just as a temporary solution to prevent attacking and stealing my pc and information and you are right. just now some of my programs do not work good because they can not access these administrative shares but now i want to know why this is happening to solve it and then bring back my administrative shares

You can disable administrative shares. However, after that, if there is any management tools in your domain that will use administrative shares, they will not work. Refer to: How to remove administrative shares in Windows Server 2008 http://support.microsoft.com/kb/954422 Please remember to click Mark as Answer on the post that helps you, and to click Unmark as Answer if a marked post does not actually answer your question. This can be beneficial to other community members reading the thread. Thanks Arthur I Knew how to disable that and i did just as a temporary solution to prevent attacking and stealing my pc and information and you are right. just now some of my programs do not work good because they can not access these administrative shares but now i want to know why this is happening to solve it and then bring back my administrative shares

but now i want to know why this is happening to solve it and then bring back my administrative shares Hello, If you used Windows without original licence key and used some programs for Windows 7 activation, we do not know, what does this programs!!! This happened exactly with other softwares or programs that you installed on your PC and did not used original licence key and used some program for activation!!!! You can use Sysinternals utilities and show, what is happening: Process Monitor v3.0 BUT AGAIN, Use original licence key and that is a must. Thanks for your understanding. Regards

Ok ! Thanks anyway https://cos72a.bay.livefilestore.com/y1p-roQwRb7-1_RuPWOkikh38bh3Pp0dSnjsOBjhvyWfzNt_JJli784yxvzsTRCk4x_9Qh8aB0bm7JABz_rPIgGsmD1HuWCCm-D/Logfile.rar?download&psid=1 this is my log file. i will be thankful if you take a look at it and tell me your opinion if any suspect is seen

Ok ! Thanks anyway https://cos72a.bay.livefilestore.com/y1p-roQwRb7-1_RuPWOkikh38bh3Pp0dSnjsOBjhvyWfzNt_JJli784yxvzsTRCk4x_9Qh8aB0bm7JABz_rPIgGsmD1HuWCCm-D/Logfile.rar?download&psid=1 this is my log file. i will be thankful if you take a look at it and tell me your opinion if any suspect is seen