| Carl Frisk 2005-03-30, 7:48 pm |
| If someone can get through your firewall and log on as Administrator you have other, bigger problems than if they can
access your C$ drive.
Don't forget to review your backup account security if you have one. Most likely you don't have it enabled if you are
not on a domain.
--
....Carl Frisk
Anger is a brief madness.
- Horace, 20 B.C.
http://www.carlfrisk.com
"BillW50" <BillW50@aol.kom> wrote in message news:lzB0e.18090$VF.902@newssvr31.news.prodigy.com...
Hi Carl, Phillip, and Bill...
I only got the impression that these Administration shares were only on
a local machine and not networked from an earlier Google search on the
topic. And that is what gave me that impression.
Gosh... I don't like learning about this! It's cool for us good guys,
but that leaves the backdoor right open for the bad guys. As it sounds
like anybody off of the Internet who manages to get through your
firewall and logs on one of the Administrators accounts, will have
access to everything? Is this so? Worse is that I also use WiFi here.
Although my WiFi is pretty well locked down using WPA. But even still.
Although doing another Google, I found a method to disable these shares.
"HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\lanmanserver\parameters"
Add DWORD value of 0 to the key name "AutoShareWks". After a
reboot, they are permanently gone!
Much earlier and shortly after my last post about this subject. I was
playing around with different computers here. And on one laptop, I
created a normal share for drive C. And then later, I went to delete it,
but I deleted the C$ one instead! Don't ask me how Windows 2000 allowed
me to do this. Well I thought no big deal, I'll just recreate the C$ one
once again.
Now I use two text files in the root folder as temporary files. I use
them between different word processors and email programs. And I also
have hotkeys to open them up with NotePad. And I never had a problem
opening them up while still in use by another application. As NotePad
still opens them just fine. Of course, you can't modify them while in
use, but that is fine by me.
Although now NotePad reports "Access is Denied" sometimes on these
machine. Although I also have NotePad in my Sent To in Windows Explorer.
What a pain doing it that way, but that would also now start popping up
"Access is Denied" messages.
I'm not sure, but I believe I have them working once again by deleting
them and then by recreating them. Too soon to tell yet.
Also I've been getting svchost.exe has created error messages and will
be shutdown by Windows on this same machine. Although I haven't noticed
anything not working correctly (except the Denied above which could be
totally unrelated). It seems to happen just once whenever I come out of
Standby or Hibernation mode. There should be a log somewhere so I can
see what this one instance was actually controlling. Anybody know where
I can find it?
Well that is enough of my network problems for others to chew on right
now. Hopefully they will be getting better here.
Cheers!
___________________________________________
Bill (using a HP AMD 1.2GHZ & Windows 2000)
-- written and edited within Word 2000
|