Why can domain users access to admin shares on my servers?

  • Thread starter Thread starter L Marshall
  • Start date Start date
L

L Marshall

Hi!,

I have just discovered that for some reason the domain users in my
server2003 environment can access administrative shares on the servers in my
domain. This is a server 2003 domain.

How can this be and how can i resolve it.

at present if a domain user types \\servername\C$ they would get to the
admin share.

Look forward to some comments.
 
Remove the domain users group from the read permissions on the ntfs
and share permissions. You can also make this change via GPO I
believe.
 
Hi!

Thanks for your reply - i have just looked at the secuirty tab, when i right
click on the C drive on my DC and domain users have read/execute access. Is
this my problem?

Does the DC have to allow read/write access to its domain users. I have
looked at our other servers and they have this also.

Let me know your ideas...................

On an admin share also you cant edit the share privilages.
 
Back
Top