Home page logo

basics logo Security Basics mailing list archives

Re: What Are These Shares(Remote Admin/Remote IPC)?
From: Ansgar -59cobalt- Wiechers <bugtraq () planetcobalt net>
Date: Thu, 1 Apr 2004 00:25:17 +0200

On 2004-03-28 Mark Sargent wrote:
are these neccessary..? I don't do any remote administration on/to
this host (Win2kPro).

I suppose you are referring to the ADMIN$ and IPC$ shares. If you don't
do remote administration, then you most likely won't need them. You can
disable them (except for IPC$ IIRC) by editing a registry value:

Windows Registry Editor Version 5.00



See [1] for details.

I'm on an ADSL LAN with my sharemate. Don't suspect anything foul from
him. I do have shared folders (for when connecting this host(laptop)
to my desktop). Is that why I see these shares in Computer Management/
System Tools/Shared Folders/Shares..?

No. These shares are automatically created by Windows for administrative

[1] http://support.microsoft.com/default.aspx?scid=kb;en-us;Q314984

Ansgar Wiechers

Ethical Hacking at the InfoSec Institute. Mention this ad and get $545 off 
any course! All of our class sizes are guaranteed to be 10 students or less 
to facilitate one-on-one interaction with one of our expert instructors. 
Attend a course taught by an expert instructor with years of in-the-field 
pen testing experience in our state of the art hacking lab. Master the skills 
of an Ethical Hacker to better assess the security of your organization. 
Visit us at: 

  By Date           By Thread  

Current thread:
  • Re: What Are These Shares(Remote Admin/Remote IPC)? Ansgar -59cobalt- Wiechers (Apr 01)
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]