Removing The Default Administrative Shares

December 2016





Windows 2000, NT and XP by default, create hidden administrative shares (admin$, c$ & d$) on the hard-drive which will allow the domain administrators to do remote access support. This tip will teach how to disable this feature.

Please proceed with these instructions:
  • Click on Start > Run
  • Type: regedit to open the Registry Editor
  • Locate: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters
  • Double click on AutoShareWks

Data Type: REG_DWORD (DWORD Value)
  • Change value data to 0


Now you will have to delete the shares through the Computer Management Console:
  • Open Control Panel,
  • Open Administrative Tools,
  • Open Computer Management.
  • Expand Shared Folders, and then click Shares.
  • In the Shared Folder column,
  • Right-click the share you want to delete,
  • click Stop sharing, and then click OK.

Related :

This document entitled « Removing The Default Administrative Shares » from CCM (ccm.net) is made available under the Creative Commons license. You can copy, modify copies of this page, under the conditions stipulated by the license, as this note appears clearly.