RE: XP admin shares

Regedit
HKLM/System/CurrentControlSet/Services/LanManServer/Parameters AutoShareServer=0
AutoShareWks=0

If they do not exist, create them with a REG_DWORD key and modify as needed
-bill-

-----Original Message-----

From: Leon Pholi [mailto:L.Pholi@secureinteractive.com] Sent: Sunday, December 08, 2002 5:28 PM
To: security-basics@securityfocus.com
Subject: XP admin shares

Hi everyone,

Just a quick one, does anyone know how to stop the default administrative file shares in Win XP (professional edition)? One would think this would be a standard part of locking down a box, but can't find much on it for XP.

You can do it through Computer Management but they'll be re-enabled at reboot, and the Win2k key of
HKLM\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters\AutoShareWks doesn't seem to exist. Any ideas?

Thanks,
Leon Received on Tue Dec 10 12:32:25 2002