Mind It!

To prevent creation of the administrative shares on Microsoft Windows NT/2000/XP do the following.

Create/Modify values for AutoShareServer and AutoShareWks:

1. In the registry, locate the following key:
   HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters
2. On the Edit menu, click Add Value.
3. Type AutoShareServer, click REG_DWORD, and then click OK.
4. Type 0, and then click OK.
5. On the Edit menu, click Add Value.
6. Type AutoShareWks, click REG_DWORD, and then click OK.
7. Type 0, and then click OK.Note: Sometimes the values are already present, especially after use of a policy that affects these entries. In addition, on Windows 2000 you are not required to add the AutoShareWks value.
8. Quit the registry, and then restart the computer.

To re-enable those default shares change the value of AutoShareServer and AutoShareWks to 1.
This process can easily be done through a policy. The path for the system policy is System Policy Editor\Windows NT Network\Sharing\Create Hidden Drive Shares.

For more information refer to th following Microsoft KB articles :

1. Q245117 – Administrative Shares Do Not Appear on Server
2. Q288164 – How to Prevent the Creation of Administrative Shares on Windows NT Server 4.0