Could anyone explain why my HD (C drive) gets changed automatically to allow sharing? I keep changing it to disallow sharing, but after a few days I check it and it is back to allow sharing.

When it does show back up as “share this folder” checked, the drive is listed as “C$” and not just “C”.

My OS is Win2K Pro and I have up-to-date AV and anti-spyware (scans have been run) plus a firewall on an encrypted LAN.


Thanks,
Randall

I've discovered there are Administrative Share creations that are hidden for each drive.

If you want a secure network, you have to disable these shares permanently, and a registry edit is necessary.

Why in the world would M$ do this?

Thanks,
Randall

Setting Permissions for a File or Folder
To set the permissions for a file or folder:
1. Use Windows Explorer to locate the file or folder for which you want to edit the permissions.
2. Right-click the folder, and then click Properties.
3. Click the Security tab.
4. To add a new access control setting to the folder, click Add.
5. Select the users, computers, or groups that this access control setting is applied to, click Add, and then click OK.
6. To remove an access control setting, click Remove.
7. To edit the permissions for any group, select the user or group, and then use the corresponding check boxes in the Permissions pane.
8. Click OK to accept the settings, click Cancel to cancel any changes you have made, or click Apply to apply the changes without closing the file or folder properties.

http://support.microsoft.com/kb/324067/en-us

You must do this with an administrator level account.

Network permissions set by a domain administrator override any local settings, so if you are a user on a domain the network admin's settings will overrule yours.

Do you have Win 2 K set up with NTFS or FAT32?

Some security options are not available using FAT32.

This is on my LAN at home so I'm an administrator on the computers. I didn't think I designated a domain on the LAN, so I'm confused on the "domain administrator" thing. I'm also not the sharpest pencil in the box concerning networking, so if that doesn't make sense, please excuse.

I'm using NTFS.

You wouldn't have set up a domain on a home network (unless you checked the box by mistake on setup)

You should have and probably did set up "workgroup" though.

You should be able to accomplish what is described above if you have it set up on NTFS. I'm not sure about FAT32 though. It doesn't have all the security settings that NTFS enables.

Let us know.

I've found out the "share" creations are in the registry and are created each log on. So it doesn't matter if I disallow sharing. The C drive goes back to "shared" each boot.

Here's a link that will explain it:

http://www.petri.co.il/disable_administrative_shares.htm

The article says XP is this way also, but the shared drive may be indeed "hidden", as I can't find this configuration on my other computer which has XP.

I, personally, need to find out why M$ did this before making registry changes.

Randall

From the article:

"These shares are hidden, but available with full control to domain administrators."

Maybe you did set up a domain when Win2K was installed.

#

C$ D$ E$ - Root of each partition. For a Windows NT workstation/W2K/2003/XP Professional computer only members of the Administrators or Backup Operators group can connect to these shared folders. For a Windows NT Server/W2K Server computer, members of the Server Operators group can also connect to these shared folders.

If you haven't given out any other administrator accounts no one else will have access.

With your help, I may have figured this out.....although this computer is not part of a domain, it came from work and seems to be configured through Network ID Wizard to be able to be part of a domain. I'll try later to reconfigure and let you know. Kinda busy now trying to get my tax stuff done.

Thanks,
Randall

You are welcome. Hope you are successful in accomplishing what you want.

If not, come back here and we'll figure it out.