Windows 7 64bit Administrative Share
I'm having real trouble enabling the administrative share on a windows machine. My ultimate goal is to use PsExec to run a remote command line on the remote computer, but I've been reading that it relies on the administrative share to function. I have enabled file sharing on the machine Turn on network discover Turn on file and printer sharing Turn on sharing so anyone with network access can read and write files in the Public folders Media streaming is off Enable file sharing for devices that use 40 or 56 bit encryption Turn on Password protected sharing Use user accounts and passwords to connect to other computers I also did the LocalAccountTokenFilterPolicy registry entry. At one point I entered the homegroup setup wizard, but I never connected it to a homegroup and it is currently disabled. Every time I try and access the admin share through explorer (\\REMOTE-PC\ADMIN$) I enter the user name \\REMOTE-PC\USER and the password, but it says access denied The curious part is that I can access several other computers' admin shares from the remote computer, but I cannot connect to the remote computer's admin share (tried from several computers, 7 64bit and XP). The remote computer is running Windows 7 64 Professional. My other computers are running 7 Home Premium and XP. Please... any help is very very appreciated. Been banging my head against the wall now for days. Nathan
June 17th, 2011 2:28am

hi, you can't access network drives using c$, d$ in or from windows 7, it is disabled for security reasons. you have to share each drive with permissions to access it in a network. Regards
Free Windows Admin Tool Kit Click here and download it now
June 17th, 2011 4:47am

I can access computer 1 (running windows 7 64bit home premium) through the remote computer (running windows 7 64bit professional) using \\Comp1\C$. So I don't believe what you say is true. I see multiple websites with instructions how to enable the administrative shares on windows 7 and people are having success, including me, but this one computer does not seem to allow access. I'm looking for a setting outside the file and network settings and the registry item that would inhibit the administrative share. Thanks, Nathan
June 17th, 2011 7:13pm

Are you able to access regular shares on this particular failing box? Right click the C$ share and choose stop sharing. Then restart the PC or just restart the lanmanserver service using the NET START/STOP command. Sumesh P - Microsoft Online Community Support
Free Windows Admin Tool Kit Click here and download it now
June 20th, 2011 7:05pm

I just wanted to add in, this worked for me! Thanks!Dave
March 3rd, 2012 2:43pm

In case anyone else runs across this when doing internet searches, none of the replies addressed the root issue: UAC restrictions in Windows 7 prevent remote access to the default administrative shares by the local (SAM) accounts. The UAC settings remove the SID of the local Administrators group. A domain member server retains the access, however. To work around this issue, you can simply make a registry change. (On a domain, you can use Group Policy or edit the Registry.) Key: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System Value: LocalAccountTokenFilterPolicy Data: 1 (to disable, 0 enables filtering) Type: REG_DWORD (32-bit) Set the data to "1" to disable the UAC filtering, then reboot. You have to reboot to reset the tokens for access. I should add that it's a lot safer to leave UAC filtering enabled if you use multiple computers as it lessens the likelyhood of infections being spread over the network. (I have multiple computers at home with kids, and since my same logon is on each computer, I leave UAC filtering so something can't accidentally spread over the network.) -- Rob "I" --
Free Windows Admin Tool Kit Click here and download it now
May 10th, 2012 1:40pm

This topic is archived. No further replies will be accepted.

Other recent topics Other recent topics