Disabling Administrative Shares
Some organizations do not want to enable administrative shares. However, when enable the remote registry service, the server service is started and administrative shares are enabled.
To disable administrative shares, modify the following registry key:
- Click Start >Run and type regedit.
- Go to the key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\
- Set the AutoShareWks parameter to 0.
This action does not disable the IPC$ share. Although this share is not used to access files directly, ensure that anonymous access to this share is disabled. Alternatively, you can remove the IPC$ share completely by deleting it at start-up by using the following command:
net share IPC$ /delete
Use this method to remove the C$ and D$ shares also.