Workstation C$ access for admins via GP?

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Hi,

I am unable to access workstations c$ unless xp firewall is turned off.
Is there any way I can allow c$ for admins via group policy without
disabling xp firewall all together?

Thanks
 
Use a Group Policy that applies to the computers to create the exception for
file and print sharing which you may want to do only for the IP addresses of
admin workstations. Look under computer configuration/administrative
templates/network/network connections/Windows firewall/domain profile -
allow file and print sharing exception. Be sure to read the full explanation
of that setting and how to configure it. Most likely you will also want to
enable the exception for allow remote administration exception.

Steve
 
My advice.. Don't!

The C$ share is possibly the least security-aware feature of NT/XP. to put
it politely. All it takes is a computer to be infected with a virus, a
passing admin to casually log-on to the infected machine, and if the malware
is written to exploit open shares, it'll be round the whole network, servers
included, like a proverbial dose of salts. If it's a really malicious strain
you could even be faced with a company-wide total loss of data.

Best advice is to use a policy or registry mod to REMOVE these shares. You
can always find other, safer, ways to transfer files to computers.
 
Back
Top