c$

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

hi,
dear can u help how to disable the C$ i know the C$ is a default sharing,i
need how to disable it to apply all the user in the domain by use such as
group policy or another way.
Thanks in advance.
 
The C$ is available only for a user that is a local administrator on the
computer and can come in quite useful. The administrative shares can be
safely disabled on most computers [not domain controllers] or you can
disable file and print sharing or the server service on computers that you
have not need to offer any shares or be managed remotely via Computer
Management and other tools that use SMB. The server service can be easily
disabled via Group Policy. The best solution may be to modify the user
rights for access this computer from the network to include only the
users/groups that you want to be able to access any shares on a computer. If
for instance your domain users are members of the local administrators group
on domain computers and you are having problems with some users accessing
other domain computers via the C$ share you could put those computers into
an OU and configure a Group Policy linked to that OU so that the user right
for access this computer from the network contains only domain admins. The
link below shows how to do a registry change to disable administrative
shares if that is what you want to do but be sure to read the other
pertinent info. You could implement such a change with a Group Policy
"startup" script. --- Steve

http://www.petri.co.il/disable_administrative_shares.htm
 
The C$ is available only for a user that is a local administrator on the
computer and can come in quite useful. The administrative shares can be
Click to expand...

The above is technically accurate (sort of) but implies that the
domain admins are not included, which they are.

Technically, domain admins ARE "local administrators" (if not THE
local adminstrator) of the computers which are members of the domain.

Doman Admins can use C$ etc.$ also.
 
Thanks for clarifying that Herb and of course you are correct and is one of
the reasons why I thought that he might want to rethink disabling the admin
shares since domain admins can often find them useful. -- Steve
 
Steven said:
Thanks for clarifying that Herb and of course you are correct and is one of
the reasons why I thought that he might want to rethink disabling the admin
shares since domain admins can often find them useful. -- Steve
Click to expand...
We find the administrative shares very useful on our network - we
connect to local workstation hard drives over the network all the time
to look at stuff.
 
hi,
dear can u help how to disable the C$ i know the C$ is a default
sharing,i need how to disable it to apply all the user in the
domain by use such as group policy or another way.
Thanks in advance.
Click to expand...

Disable File and Print Sharing on each PC. You'll probably have to use
a script: I don't think you can set that in Group Policy.

Adam
 
Back
Top