Take the 2-minute tour ×
Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

I have removed the administrative shares, but the shares are re-enabled after rebooting. I have also tried the editing the registry as described in this Microsoft forum post, but it's also re-enabled after a reboot. Is there anyway to disable the shares so that they remain disabled after a rebooting?

share|improve this question

2 Answers 2

up vote 2 down vote accepted
+50

In Windows 7 administrative shares are less harmful than in previous versions of Windows, because they are hidden over the network and can in addition only be accessed remotely by network administrators. Microsoft specifically warns that disabling them may cause some programs to malfunction (but doesn't say which ones).

If you wish to disable them, the only way is to create a startup script, because these shares are always recreated during the boot.

An example script is :

NET SHARE C$ /delete
NET SHARE D$ /delete
NET SHARE admin$ /delete

Put these commands in a .bat file, create a shortcut to it on the desktop (or elsewhere), then drag the shortcut to Start > All Programs > Startup to execute automatically upon login.

Another way to do the same thing is to save the shortcut or batch file in %AppData%\Microsoft\Windows\Start Menu\Programs\Startup\.

share|improve this answer
    
How can you say that administrative shares are unusable in Windows 7? Maybe in your particular setup, but I do have d$ and c$ on my PC accessible from my laptop. –  Kitet Feb 16 at 22:01
    
@Kitet: You are right - my phrasing was much too general. Corrected. –  harrymc Feb 17 at 6:41

Please read this first http://support.microsoft.com/kb/842715/en-us - here you can find an potential issue that could happened while administrative shares are off. Some Windows services depend on it.

You may experience a variety of issues when administrative shares are removed or are otherwise missing from your computer.If you use the net share command or MPSReports, the output may show that your computer is missing the IPC$, ADMIN$, or C$ share. If you re-create a missing share, it may be missing again after the next startup or logon. This issue may occur even if you set the AutoShareServer and AutoShareWks registry DWORD values to 1.

If the affected computer is a domain controller, you may receive error messages on client computers during network logon or during the times when they try to join the domain. Sometimes, you can log on with client computers that are running Microsoft Windows 2000 or Microsoft Windows XP, but you cannot log on with client computers that are running Microsoft Windows 95, Microsoft Windows 98, or Microsoft Windows Millennium Edition.

When you try to access or view the affected computer remotely by using a UNC path, a mapped drive, the net use command, the net view command, or by browsing the network in Network Neighborhood or My Network Places, you may receive an error message.

You may receive errors when you try to perform administrative tasks on a domain controller. For example, MMC snap-ins such as Active Directory Users and Computers or Active Directory Sites and Services may not start, and you may receive an error message.

If you are sure what you are doing just google for answer.

share|improve this answer
1  
Hello Filip. "Link only" answers are not useful for this site. If the link goes away, the answer goes with it. Please paraphrase the content into your answer. Feel free to leave the links as reference, but answers should stand on their own. –  Paul Feb 16 at 1:48
1  
thanks for pointing that Paul. I will make a change –  Filip Feb 16 at 6:57

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.