HFX Forum

Security => Hints & Tips => Topic started by: wilnix on March 04, 2002, 03:23:40 PM

Title: To get rid of those damn default shares in NT / 2K
Post by: wilnix on March 04, 2002, 03:23:40 PM
Here's how:

Start the registry editor
Move to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters
If you are using Workstation create a value (Edit - Add Value) called AutoShareWks (AutoShareServer for server) of type DWORD and press OK. It will ask for a value, type the number 0.
Close the registry editor
Reboot


::) Wilnix
Title: Re:To get rid of those damn default shares in NT / 2K
Post by: Uneek on March 05, 2002, 03:24:50 AM
The pisser of this is that if the attacker has an admin account on the NT Network, all he has to do is fire up the server manager create whatever share(s) he wants on any domain member... Gotta love Windows!
Title: Re:To get rid of those damn default shares in NT / 2K
Post by: wilnix on March 05, 2002, 12:27:17 PM
Yeah, but in win2k pro, you can take the domain admin out of the local administrators group. In NT, your just screwed.

Wilnix