NET share lists the default shares for Windows (including C-drives)

There is also a separate opening approach:

To turn on the sharing method :

1. Command line mode: NET share blog =f:\ entertainment \ Seed I set up a share named "blog", The path is: "F:\ entertainment \ Seed".
2. GUI mode: Find "f:\ Entertainment" the "Seed" folder, right click, find the properties of the shared label, according to the prompts to set. Relatively simple is no longer ao described.

If you can't share your folder, or you can't find a shared tag in the folder properties. Please refer to the following two articles:

1. Unable to share: Make sure your server, workstation two services are turned on. Enter Services.msc in the run to open Service Manager, locate the above services, set to Automatic, and start the appropriate services.
2. Shared tags not found: Open My Computer, tools---Folder Options, view tags. Check use simple file sharing (recommended). Click OK to exit.

http://www.freenas.com.cn/?p=110

When you use the "NET SHARE shared folder/delete" shutdown, it will be re-shared later.

Here are four ways to solve this problem, you can choose one of them:

1, if you do not use the shared services within the LAN , simply uninstall the "Local Area Connection" attribute "network file and Printer Sharing", the default share can be completely shut down

2, batch processing self-starting method

Open Notepad and enter the following (remember to return each line at the end):

NET share ipc$/deletenet share admin$/deletenet share C $/deletenet share d$/deletenet share e$/deletenet share f$/de Lete

...... (You have a few hard disk partitions just write a few lines of such commands)
Save As Notshare.bat (Note suffix!) ), then drag the batch file to the "programs" → "startup" item so that it runs every time it is turned on, that is, the share is closed through the net command.

If one day you need to turn on some or some of the shares, just re-edit the batch file (delete the corresponding command line).

3, registry Change key value method

"Start" → "run" after entering "regedit", open Registry Editor and locate the "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services
\lanmanserver \parameters "Item, double-click the" AutoShareServer "entry in the right window to change the key value from 1 to 0 so that the share of each partition of the hard disk can be turned off. If you do not have a AutoShareServer item, you can create a new one and then change the key value yourself. Then the "AutoShareWks" item is found under this window, and the key value is changed from 1 to 0, and the admin$ share is closed. Finally, find "RestrictAnonymous" at the "HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa" entry, set the key value to 1, and turn off ipc$ sharing.

Note: This method must restart the machine, but once changed it will stop sharing forever.

4. Stop Service Law

Or, in the Computer Management window, click Expand Services and applications on the left and select services in it, and all service items are listed on the right. The name of the shared service is "Server" (name in process), double-click it when found, and in the "General" tab that pops up, change the "Startup Type" from "Automatic" to "disabled". Then click on the "Stop" button below "service status" and then confirm that it's OK.

Http://www.lai18.com/content/391422.html

You can view all current shares when you enter the net share command

NET share C $/del
NET share d$/del
NET share ipc$/del
NET share admin$/del

If you want to automatically delete the default share after each boot, just save the above command as a. bat file, and the boot will run automatically.

Second, open the default share:

In the Control Panel "Services", see if the Server service is started, if not started, it will be set to automatic or manual, and then select Start.
How to turn on the default shared system
1. Check whether the AutoShareServer and AutoShareWks registry values are 0.
2. Locate the Hkey_local_machine\system\currentcontrolset\services\lanmanserver\parameters in the registry.
3. Change the AutoShareServer and AutoShareWks DWORD values in the following subkey to 1.
4. Restart. Typically Win2003, Win2000\xp are created automatically at startup.
5. After booting, you can run the cmd command to enter command-line mode, then run net share, and the shared list will see the default shares admin$, c$\ipc$, and so on.
Note: If the method above is still invalid. It could be a virus or a malicious program that destroys the system, which is the first to disinfect and restore the system.
Closing the Server service, removing the Microsoft client drive on the NIC, and removing the file and print share on the NIC will turn off the default share. At this point, you want to restore the appropriate item settings.


You can also enter CMD in the run of the Start menu, and then enter the following command
NET share c$=c:
NET share d$=d:
NET share ipc$
NET share admin$

In the Computer management of the shared files can also be set to all the shared directory, right-"My Computer" and "management", "Shared files", because the graphical interface is relatively simple, here is not detailed description.

In the Windows 2000/XP system, there is a vulnerability that is said to be "fatal", which makes many people talk about the "tiger" color change as soon as they hear it. On my Computer, right-click Manage, select System tools → shared folders → share, and you'll see the default share in the right window (see Figure 1). These symbols with the dollar "$" tag are the Windows system default share, which is the feature that Windows automatically shares after installation, which many people have heard is a loophole.

What are ipc$, admin$, C $, and d$?

ipc$ (Internet Process Connection) can be understood as a "dedicated pipeline" that can establish a secure channel on both sides of the connection to enable access to remote computers. While Windows NT/2000/XP provides ipc$ functionality, the default share is also turned on when the system is first installed, which is all logical sharing (c$,d$,e$ ...). Shared with the system directory (admin$). All of these shared purposes are for the convenience of administrator management, but in the intentional and unintentional, resulting in system security risks.

Microsoft inadvertently caused by the hidden dangers, caused a lot of attention, about their various statements are also circulated in the network between. Look at the following popular theories, do you have the same view?

Point one: The default share itself is a vulnerability, so to avoid security risks, you must remove all the default shares.

View two: The default share is like common sharing, anyone can use admin$,c$,d$ and other shares to steal from your computer.

Point three: ipc$ can be deleted and will not reappear.

Point four: To delete the default share, you can do so as long as you create a batch file in the Windows boot script.

Answer 1: Since the default share is a vulnerability, why not Microsoft? In fact, the default sharing is a very useful feature, but we usually do not use it. Microsoft's intention was to facilitate remote management of the network. Just imagine. In a large network. Is it necessary for an administrator to go to a machine to see something or remove something? These administrators can easily do this by default sharing before they sit on the console. This is a feature Microsoft provides for ease of administration. I don't know when it started, it became a loophole in the mouth of others.

A 2: If you open all the default shares. Can someone use the default share to steal something from your computer? The answer is No. Unless it's you who wants to let him in. The default share is an administrator-level operation or an account with relative permissions. Do you want to try a guest-level user who can use the default share? No, why do you think you're going to let someone else in? You ask yourself. What about your admin password? either directly or empty. Or some kind of weak password like 123,1234. It can be guessed in a short time with the scanning tool. You have opened the door, what reason does someone not come in?

Even if your password is empty or a weak password, the other person may not be able to use the default share to enter your computer for administrator-level operations. Why? When sharing mode is only guest mode. The user rights for any connection can only be at the guest level. How much permission does guest have? You can do an experiment without believing it. Connect to a host with only guest-enabled and open default shares with the net use command. For example: net use \\ip\IPC$ "password"/user: "Administrator" I can tell you for sure: Whatever your password is filling in. Will remind you that "command completed successfully". Do you actually get administrator privileges? The answer is No. All you get is guest permissions. Fortunately, the default way to share Windows XP after installation is "Guest only".

Answer 3:windows 2000 the ipc$ share can be deleted, however, under XP it is not. The online generation of this statement is nothing more than a firsthand experience of the Windows 2000 directly moved to the XP bar. Let's see what Microsoft says: "The server service needs to use the default ipc$ system management share. Therefore, you cannot delete this share, and we recommend that you do not delete the system administrative shares created by Windows for root partitions and volumes (such as C $) and for the system root folder (admin$). Deleting these folders may cause problems for administrators and programs or services that rely on these shares. "See, you won't be able to delete ipc$ as long as the server service" server "is running. An attempt was made to remove an "Access Denied" error message only. After you stop the Server service. Ipc$ will automatically disappear.

A 4: Creating a script can indeed delete the default share. But many people on the web will refer to configuring the boot script through Group Policy. In fact. Creating a boot script does not delete the default share. If you don't believe you can go and try. Create a batch script by using the net share command to delete a share as online. Then add to the Group Policy "Computer Configuration →windows settings → scripts (start/close)" Go, restart and then use the net share command to see. You will find that the default share is not deleted! This script does not work.

Summarize:

The default share is not a vulnerability. It is not the default share itself that creates a security risk. But the system user itself. When you look at some articles on the Internet or in books. As far as possible through self-practice to prove whether it is correct, there are a lot of things you preach me, I preach you, spread to change the taste.

http://blog.csdn.net/holandstone/article/details/14165377

NET share lists the default shares for Windows (including C-drives)