Locking down my box

  • Thread starter Thread starter Rob
  • Start date Start date
R

Rob

This is probably totally lame but here goes....
If you are a member of the Domain Amin group and you set
permissions only to your account and your back door
account why can domain admins still C$ my desktop
I thought if it was locked down it is locked down..
please someone help me
 
Admins will always be able to access the administrative shares such as C$,
D$, Admin$ etc
This is by design.

You can disable the admin shares

Enter the Registry and find,

HKeyLocal Machine\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters.

For Servers edit (or add) AutoShareServer with a REG_DWORD Value of 0.
For Workstations, edit (or add) AutoShareWks with a REG_DWORD Value of 0.

This doesn't stop the IPC$ share

Regards
Mark Dormer
 
Back
Top