Windows system >> Windows XP System Tutorial >> XP system basics

Clearing the system default sharing method revealed

Since the Windows 2000 operating system, Microsoft has added a new network function called Windows default sharing. Some friends will ask, why is it called "default sharing"? Originally, there is a fundamental difference between these folders and our own manually created shared folders, and there will be a "$" symbol at the end of their shared name. The role is to be able to hide yourself in the network neighborhood. This way, unless we know in advance the share names of these default shares, it is not possible to go directly to these folders by the usual method. At first, this function was mainly designed by Microsoft to facilitate the daily work of system administrators. By default, they are open, but because Windows vulnerabilities are emerging, the names of these default folders have long been Well-known, therefore, these features originally set by Microsoft's kindness have become a huge security trap when used, which seriously threatens the security of the system and server. For this kind of "chicken rib" function, we naturally need "Turn him off without discussion." Today, the author lists several of the most common methods for clearing Windows default sharing for your reference.

how to view the default share

Although the default sharing My Network Places is hidden display, but for system administrators alike, look at it, it is a piece of cake. The most frequently used is the following two methods

Method a: the GUI

advantages: easy to use, intuitive and strong, the related management operations is very convenient, suitable for primary administrators

Double-click to open the "Administrative Tools" of the Control Panel, execute the "Computer Management" icon, and expand "Shared Folders → Sharing" in the window shown in Figure 1. You can see it in the right area. to all current shared folder on your system (shown in Figure 1 is the most common default shared three systems)

method two: command line

advantages: convenient, features a more GUI mode Stronger, suitable for advanced administrators to use

Execute the command "net share" in the "command prompt" window, as shown in Figure 2, the system will display all the shared folders on the machine. Come out (with $ character is hidden sharing)

[Small tips] As you can see from the figure, the default Windows share can be roughly divided into three categories: the first category is "ADMIN$ "Share, it points to the current system Working directory (WINNT directory). The second type is a share similar to "C$, D$, E$...", which points to the root directory of each disk partition on the machine. The last category is "IPC$", which is what we often call "shared named pipes", and the famous empty connection vulnerability is also using this IPC$

[small tips] in the

Shared Clearing Scheme 1: Manual Clearing Method

Convenience Index: ★★

Recommended Index:

Advantages of the program: convenient and fast, no special technical

negative effects: It is a palliative approach, restart the computer after each share will automatically appear by default, must be re-cleared

for the environment: the program is suitable for long-term Server system without shutdown

GUI mode

1. Double-click the "Administrative Tools → Computer Management" icon in the Control Panel

2. Expand the "Computer Management" window “System Tools→Shared Folder→Share”

3. Right-click the default shared folder, execute the “Stop Sharing” command in the menu, and then click “OK” in the window shown in Figure 3. Button can be

Command Line Mode

(This To clear the default ADMIN $ share for example)

1. Click the "Start" menu → "Programs → Accessories → Command Prompt", open a command prompt window

2. implementation of "net share admin $ /delete "after the carriage return

3. the system appears to perform

what Windows window has been removed after 4 prompted" \\\\ computer name \\ default The share name command (example: \\\\server\\admin$) can enter the directory specified by the shared folder

Shared cleanup scheme 2: batch cleanup method

Convenience Index: ★★

Recommended Index: ★

Advantages of the program: Eliminate the problem that the program automatically occurs after restarting the computer, suitable for various environments

Negative effect: Need to compile DOS
batch program, requiring administrator to have simple DOS
programming ability

Applicable environment: This scheme is suitable for ordinary computer system and server system< BR>
1. Open the Notepad program

2. Enter the following command

Net share admin$ /Delete

Net share ipc$ /delete

Net share c$ /delete

Net share d$ /delete

3. Click on the "File" menu → "Save As" command, save the current file with "share.bat" as the file name on the "Desktop" (the purpose of saving on the desktop is to facilitate the following operations, you can also save it in other locations with other file names)

4. Drag the “share.bat” file on the desktop to the “Start” menu→“Program→Start” item.

Sharing Clearing Scheme 3: Optimizing Software Method

Convenience Index: ★

Recommended Index: ★★

Advantages of the program: no manual programming, graphical interface, intuitive operation

Negative effect: need to be installed optimization software, a little trouble

for the environment: the program is suitable for ordinary computer systems and server systems

(paper, super rabbit magic set V6.25 version, for example)

1. Double-click to open Super Rabbit Magic Setting Software

2. In the main interface Hit "Super Rabbit Magic Set" button, to enter the interface provided magic

3. Click the "Network" tab → "Network Options",

5 as shown in FIG 4. Select wherein "No Automatically share Server (C$, D$) and "Do not share Works (ADMIN$)" and click "OK".

[Small Tips] Other system optimization software (such as Optimized masters
etc.) also have similar functions, but the names are different. Interested readers can try it themselves.
Sharing Clearing Scheme 4: Modifying the Registry Method

Convenience Index:

Recommended Index: ★★

Advantages of the solution: It can fundamentally solve the problem of the system automatically starting the default sharing

Negative effect: need to perform the registry operation, Slightly troublesome

Applicable environment: This program is suitable for ordinary computer systems and server systems

Close partition default sharing (such as C$, D$, E$ ......) ——
< BR> 1. Click the “Start” menu → “Run” and enter in the “Run” dialog box that pops up. Enter "regedit" and open the registry editor

2. Expand the "HKEY_LOCAL_MacHINE\\SYSTEM\\CurrentControlSet\\Services\\Lanmanserver\\parameters" registry key

3. Double-click in the right pane the "AutoShareServer", it is key to "0" can,

shown in Figure 6 Close management default share (ADMIN $) -

1. click "start "Menu → "Run", enter "regedit" in the pop-up "Run" dialog box and press Enter to open the Registry Editor

2. Expand "HKEY_LOCAL_MacHINE\\SYSTEM\\CurrentControlSet\\Services\\Lanmanserver\\parameters "Registry key

3. Double-click "AutoShareWks" in the right pane and change its key value to "0".

Close IPC$ default share -

1. Click "Start" menu → "Run", enter "regedit" in the pop-up "Run" dialog box and press Enter to open the Registry Editor

2. Expand "HKEY_LOCAL_MacHINE\\SYSTEM \\CurrentControlSet\\Control\\Lsa" registry key

3. Double-click “restrictanonymous” and set its key value to “1” (note, not “0”, it is “1”)

[Small Tip] In fact, the optimization software closes the default sharing method. modify the registry, but in GUI interface design, more user-friendly

sharing Clear program five: uninstall direct method

convenient index: ★

recommended index: ★

Advantages of the solution: The setting method is very simple, suitable for novice operation, and eliminates the shared access vulnerability

Negative effect: After uninstalling the service, the machine will no longer be able to share any folders (including manual Shared folder)

Applicable environment: This solution is suitable for ordinary PCs without LAN environment

1. Click “Start” menu→“Settings→Control Panel”

2 Double-click the "Network Connection" icon in the Control Panel window.

3. Right-click "Local Area Connection" and select "Properties"

4. Check "File and Printer Sharing for Microsoft Networks" Click "Uninstall" "Button, shown in Figure 7

written in the last

in fact, talking about how to turn off the default Windows share, is not a new topic, and been able to have a few above A different approach, the difference is that they are different in convenience, and the appropriate system environment is different. Today, I only list the five most common methods one by one. The main purpose is to make it easier for everyone to choose the most appropriate method according to the situation.