Removing The Default Administrative Shares

March 2017

Windows 2000, NT and XP by default, create hidden administrative shares (admin$, c$ & d$) on the hard-drive which will allow the domain administrators to do remote access support. This tip will teach how to disable this feature.

Please proceed with these instructions:
  • Click on Start > Run
  • Type: regedit to open the Registry Editor
  • Locate: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters
  • Double click on AutoShareWks

Data Type: REG_DWORD (DWORD Value)
  • Change value data to 0

Now you will have to delete the shares through the Computer Management Console:
  • Open Control Panel,
  • Open Administrative Tools,
  • Open Computer Management.
  • Expand Shared Folders, and then click Shares.
  • In the Shared Folder column,
  • Right-click the share you want to delete,
  • click Stop sharing, and then click OK.


Published by netty5.
This document, titled "Removing The Default Administrative Shares," is available under the Creative Commons license. Any copy, reuse, or modification of the content should be sufficiently credited to CCM (