How to Prevent the Creation of Administrative Shares on Windows NT Server 4.0

This Microsoft article(Article ID:288164) explains how to prevent creation of the administrative shares on Microsoft Windows NT Server 4.0. Create values for AutoShareServer and AutoShareWks:

1. In the registry, locate the following key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters
2. On the Edit menu, click Add Value.
3. Type AutoShareServer, click REG_DWORD, and then click OK.
4. Type 0, and then click OK.
5. On the Edit menu, click Add Value.
6. Type AutoShareWks, click REG_DWORD, and then click OK.
7. Type 0, and then click OK.Note: Sometimes the values are already present, especially after use of a policy that affects these entries. In addition, on Windows 2000 you are not required to add the AutoShareWks value. I tested this on W2Ksp4, need to have AutoShareWks.
8. Quit the registry, and then restart the computer.

This process can easily be done through a policy. The path for the system policy is System Policy Editor\Windows NT Network\Sharing\Create Hidden Drive Shares. For additional information about hidden administrative shares that are not created, click the article number below to view the article in the Microsoft Knowledge Base: 156365 Hidden Shares Are No Longer Available After Using System Policy APPLIES TO: Microsoft Windows 2000 Server, Microsoft Windows 2000 Professional Edition