Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

With WinXP in a corporate environment, one has to explicitly setup shared folders and define permissions for another user to be able to access them. So for folder XYZ on machine ABC another user could enter \\ABC\XYZ in Windows Explorer (or in the Run box) to open that folder, assuming they have valid credentials on the network. But there is what seems to be a back door, in that that user could also enter \\ABC\C$ to access the root drive of machine ABC--without ever having defined the root drive as a shared folder.

I imagine there is some way to control access to \\ABC\C$ and would like to understand how to do it, in the interests of understanding how secure my workstation really is.

share|improve this question

3 Answers 3

up vote 1 down vote accepted

It is not a backdoor as you need to have administrator credentials in order to access this share. If you have administrator credentials for a machine, you can pretty much do what you want anyway!

However, if you want to manually delete or change this share, go in to

"Computer Management" > "System Tools" > "Shared Folders"

or go to the run prompt and type

fsmgmt.msc

and you should be able to see and change it there.

share|improve this answer
1  
You need to be very careful about deleting any of the $ shares, as these can often be used by both Windows itself and other 3rd party software in order to perform remote maintenance activities. So while you can delete them, you may find yourself breaking something else... –  Sam Oct 24 '09 at 1:05
    
+1, very good and I should of mentioned that!.. Personally, never really seen any problem with it and never deleted it, but obviously I have heard this non stop that it should not be deleted. –  William Hilsum Oct 24 '09 at 1:14
    
I do not have any pressing need to do this; just more of an interest in where it was controlled from--thanks! –  Michael Sorens Oct 26 '09 at 17:39

Such access requires administrative credentials on the target machine. Unless the user can already log in as an administrator they cannot access the drive roots unless they are explicitly shared.

share|improve this answer

Removing administrative shares from within Computer Management will not have a lasting effect. To remove them, follow the information in the article "Remove Administrative Shares" should provide details on how to properly remove them.

That said, I DO NOT recommend doing this - you will disable management abilities that can make things more secure by making it more manageable.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.