How to Prevent the Creation of Administrative Shares on Windows NT Server 4.0

IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

This article explains how to prevent creation of the administrative shares on Microsoft Windows NT Server 4.0.

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.


Create values for AutoShareServer and AutoShareWks:

1. In the registry, locate the following key:
   HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters
2. On the Edit menu, click Add Value.
3. Type AutoShareServer, click REG_DWORD, and then click OK.
4. Type 0, and then click OK.
5. On the Edit menu, click Add Value.
6. Type AutoShareWks, click REG_DWORD, and then click OK.
7. Type 0, and then click OK.Note: Sometimes the values are already present, especially after use of a policy that affects these entries. In addition, on Windows 2000 you are not required to add the AutoShareWks value.
   
   
8. Quit the registry, and then restart the computer.

This process can easily be done through a policy. The path for the system policy is System Policy Editor\Windows NT Network\Sharing\Create Hidden Drive Shares.

For additional information about hidden administrative shares that are not created, click the article number below to view the article in the Microsoft Knowledge Base: