By default, Windows creates some hidden shared folders, These folders have the dollar "$" flag at the end of the name . These hidden shares are not visible when the user is on a network node in the File Explorer or when using a command to view a network share. This situation exists in XP, Vista, Windows7, Windows8/windows 8.1, and WINDOWS10, and is designed to allow system administrators, programs, and related services to manage the network environment.
Windows opens the following hidden management shares by default:
• Root partitions or volumes
• system root Directory
fax$ Sharing
ipc$ Sharing
print$ Sharing
The opening of these shares allows any user with administrative access to your computer or Active Directory (Active Directory) domain (connected state) to enter any partition without the need for you to actively share the file, as he has obtained your account credentials. In Windows NT-based systems (XP, Vista, Win7, win8/win8.1, and WIN10, etc.), all partitions are shared to administrators by the Manage shares feature. So this mechanism is a security risk, you can take the following three ways to completely shut down the sharing function.
1. Shutdown Server Service
① on the Run, Task Manager or Cortana search bar (WIN10)/Start menu Search bar (Win7)/Start screen Search bar (Win8.1), enter services.msc , and then turn on "services"
② Find Server , double-click to open
③ Select Disable in Startup type and then click " Stop " after "service status" to determine
This approach closes the administrative shares mentioned at the beginning of the article, but is "overkill" for users who need to turn on sharing and some file sharing, such as print and fax. The next two ways are more appropriate for this segment of the user.
2. Close "Manage Shares" in the registry
Although it is in the registry, but this method does not bother, but it is better to back up the registry before the modification , so as to prevent errors caused unnecessary trouble. Can use the soft magic cube Cleaning master to complete the operation, convenient and quick.
The specific methods are as follows:
① Open Registry Editor when you enter Win8.1 after the run, Task Manager or Cortana search bar (WIN10)/Start menu Search bar (Win7)/Start screen Search bar (regedit)
② positioning to
Hkey_local_machinesystemcurrentcontrolsetserviceslanmanserverparameters
③ Create a new DWORD (32-bit) value , rename it to AutoShareWks , and set its numeric data to "0 " and then click OK
3, the use of soft magic cube set the master to close the "management share"
Use the Rubik's cube to operate more concise, and will not affect the normal sharing function, convenient and efficient.
① Open the latest version of the soft Rubik's Cube, find "Set master"
② Select network share settings in Network settings
③ in "Sharing settings" Check the administrative shares you want to cancel, in general, the first three items should be checked, remember to click " Save Settings ", and then in the "shared list" You can choose to clear the IPC share , the project is a higher risk
So far, three methods are introduced, the operation is not too difficult, for the current mainstream Windows system are applicable. The key is that after the first installation of the system, it is best to close these "risk factors" and prevent them early.