RE: XP admin shares

["Bill Martin" <martin.b () attbi com>]

Regedit
HKLM/System/CurrentControlSet/Services/LanManServer/Parameters
AutoShareServer=0
AutoShareWks=0

If they do not exist, create them with a REG_DWORD key and modify as needed
-bill-

-----Original Message-----
From: Leon Pholi [mailto:L.Pholi () secureinteractive com]
Sent: Sunday, December 08, 2002 5:28 PM
To: security-basics () securityfocus com
Subject: XP admin shares


Hi everyone,

Just a quick one, does anyone know how to stop the default administrative
file shares in Win XP (professional edition)? One would think this would be
a standard part of locking down a box, but can't find much on it for XP.

You can do it through Computer Management but they'll be re-enabled at
reboot, and the Win2k key of
HKLM\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters\AutoShareWks
doesn't seem to exist. Any ideas?

Thanks,
Leon