Home / server / Questions / 358101
In Process
Safado
Asked: 2012-02-09 09:48:29 +0800 CST

XP server allows all domain users to c$ share

  • 772

I have an XP Pro computer acting as a Quickbooks server. I've noticed that any user on the domain can access the computer via \\quickbooks\c$. I've looked in the local Administrators group on the quickbooks server and there is no group that any domain user would be a part of. I've checked the access on all of my Windows Server 2008 machines and they work as expected (Domain Users cannot access c$ share). It's just this one computer that is allowing them.

I can't find any hint as to why it's allowing access for everyone. Any ideas on where else I can check?

network-share security windows-xp unc

2 Answers

  1. Probably has nothing to do with domain permissions. You should just disable the c$ administrative share and set appropriate permissions on any other shares you do have.

    Link to disabling administrative shares.

    I haven't tried it but I generally find decent info there.

    • 3

  2. What version of XP are you running? SP3 disables Administrative Share access over the network.

    You can enable it by following the very simple steps listed here:

    http://en.wikipedia.org/wiki/Administrative_share#How_to_enable_in_Windows_XP_Service_Pack_1.2C_2.2C_and_3

    But in short, if you're looking to disable this behavior by default (XP SP2 and prior allow this kind of access) you should upgrade that XP machine to SP3.

    EDIT: Given the uproar about this particular solution, I should make it clear that IF DOMAIN USERS CAN ACCESS ADMINISTRATIVE SHARES OVER THE NETWORK, it is because they have permission to do so. Somewhere along the way, one or all users were given the permissions to access this. Administrative shares ($) are only supposed to be accessible by Administrator level accounts. Period.

    • 0