Why can domain users access to admin shares on my servers?

Why can domain users access to admin shares on my servers?
Secure Home | Search | About
Login Password
Register Now! Lost Password?
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Why can domain users access to admin shares on my servers? L Marshall 06-25-2008
Posted by =?Utf-8?B?TCBNYXJzaGFsbA==?= on June 25, 2008, 8:46 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi!,

I have just discovered that for some reason the domain users in my
server2003 environment can access administrative shares on the servers in my
domain. This is a server 2003 domain.

How can this be and how can i resolve it.

at present if a domain user types \servername\C$ they would get to the
admin share.

Look forward to some comments.

Posted by on June 26, 2008, 4:44 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Remove the domain users group from the read permissions on the ntfs
and share permissions. You can also make this change via GPO I
believe.

Posted by =?Utf-8?B?TCBNYXJzaGFsbA==?= on June 27, 2008, 4:22 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi!

Thanks for your reply - i have just looked at the secuirty tab, when i right
click on the C drive on my DC and domain users have read/execute access. Is
this my problem?

Does the DC have to allow read/write access to its domain users. I have
looked at our other servers and they have this also.

Let me know your ideas...................

On an admin share also you cant edit the share privilages.

Similar ThreadsPosted
Workgroup clients can access domain shares July 10, 2008, 12:14 pm
How do I restrict users from joing member servers to my domain May 1, 2006, 6:02 am
Giving access to a share folder in domain A to users in Domain B May 17, 2007, 2:22 pm
Missing Admin Shares July 19, 2007, 6:54 am
Domain Admin administering Domain Computers December 6, 2005, 2:58 am
Access to network shares January 25, 2007, 5:13 am
Open Access to Shares June 7, 2008, 6:22 pm
Read Only Access to ALL Shares On a Network December 12, 2005, 3:34 pm
Access to Shares by Right Click on the Start menu June 18, 2008, 10:29 am
Forest/Domain in the "DMZ" to accomodate web, front-end servers September 19, 2005, 5:16 pm

The site map in XML format XML site map

Contact Us | Privacy Policy