Windows2000/XP system default share

  
                              

We can use the Net Share command to delete, but this share will automatically appear after the machine restarts. At this time, we can modify the registry.
IPC$, Admin$ and C$, D$ are different, the modification in the registry is different. What you have changed is only the prohibition of C$, D$. There is no ban on IPC$.
Disable C$, D$ Manage Share
For the server:
Modify HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\lanmanserver\\parameters
Name:AutoShareServer
Type:DWORD
Value :0
For workstations:
Modify HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\lanmanserver\\parameters
Name:AutoShareWks
Type:DWORD
Value:0
After modifying the registry Need to restart the Server service or restart the machine.
Note: These key values ​​do not exist on the host by default and need to be added manually.

Disable ADMIN$ default share
HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Services\\lanmanserver\\parameters
Name:AutoShareWks
Type:REG_DWORD
Value:0x0

Limit IPC$ default share
HKEY_LOCAL_MACHINE\\SYSTEM\\CurrentControlSet\\Control\\Lsa
Name:restrictanonymous
Type:REG_DWORD
Value:0x0 (default)
0x1 Anonymous users cannot enumerate this machine User List
0x2 Anonymous users cannot connect to the local IPC$ share
Note: It is not recommended to use 2, otherwise some services may not be started, such as SQL Server

Copyright © Windows knowledge All Rights Reserved