By default all Microsoft Windows NT based operating system exposes hidden administrative shares options, which allowing the administrator of a machine to access the machine via the network. The administrative shares are:

• C$: To access to a partition or root directory. Other partitions available on your computer are also accessible via their letter, followed by the character "$", for example D$, E$, etc
• ADMIN$: To access to% systemroot%, to manage a machine on the network
• IPC$: Allowing the communication network between processes
• PRINT$: Remote access to printers.

So by default you can access all files in drive C: by simple connecting it by typing \\yourcomputer\C$ on Start – Run… menu or Windows Explorer.

For some security constraints, it may be necessary to remove access to administrative shares.

To do this, we must edit the registry, by type the following command in the Start – Run… menu:

Then go to this item:

Then, create a new DWORD value named AutoShareWks and set it to 0. To activate it again set the value to 1.

Your registry will looks like this:

Modifications made will still be persistent even after restarting your PC.

Akhmad Daniel Sembiring

vITraining.com – Qualified IT Products, Outsourcing, and Services

Ligarwangi.com – Linux, E-book, Coffee, Gift, etc