Windows 7 Forums
Welcome to Windows 7 Forums. Our forum is dedicated to helping you find support and solutions for any problems regarding your Windows 7 PC be it Dell, HP, Acer, Asus or a custom build. We also provide an extensive Windows 7 tutorial section that covers a wide range of tips and tricks.


Windows 7: Disabling shares folders ending with "$"


21 Aug 2013   #1

Windows 7 Home
 
 
Disabling shares folders ending with "$"

Hi guys,

First post here. I need some help how to disable shares folders, "C$", "IPC$", etc. In Computer Management, I tried right click on the folder and I don't have the "Stop Sharing" option (I have administration rights in my system). I know the dollar sign means that these folders are administrator shares, but I don't know if somebody outside or inside my network can see/connect to these folders, if they have the logon windows password. I don't think this is secure, because I can connect wirelessly to these folders with my phone, and even create files in my system.

I wanted to disable network discovery but I regularly use a wireless printer, so that's not an option. My only option is disabling these sharing "$"folders. Please how to do this? Thanks for any help.

My System SpecsSystem Spec
.

22 Aug 2013   #2

Windows 7 Professional x64 SP1 ; Windows Server 2012 R2 Standard
 
 

Shares with the '$' at the end of them are hidden from the client machines network tab and any command prompt equivalent. The only way of a client to try and access them are to manually enter the UNC path. As you can see there are hidden shares currently active for this server but the client side cannot see it.

Note   Note
I am currently using Windows 8 however please be assured that the same information and steps apply to Windows 7 as well as Vista


Disabling shares folders ending with "$"-server-share.png

Disabling shares folders ending with "$"-client-share.png

Disabling shares folders ending with "$"-client-share-cmd.png

Windows will create these shares for Administrative Purposes which are normally used by IT admins in order to ease management as well as help with virtualisation technology that may restrict them from local access to the server. In a domain environment only Domain Administrators have access to these administrative/hidden shares therefore any standard user will not be able to access these shares. In a WORKGROUP environment which is what you are currently using, only local Administrators of the host machine can have access to the Administrative shares. For example if I have a machine called Josh-PC then only the Administrators account for that machine can have access to the share.

When accessing the share from a remote machine you should be prompted with an Access Denied message prompting you to provide credentials like the one below. From here you enter the username and password of the computer with the share to see if you can access the hidden share. An example below is of me entering Administrator credentials which have access to the hidden shares.

Name:  Authentication for Admin share.PNG
Views: 3
Size:  17.6 KB

Unless all your users have an Administrator account I would not be worried about the hidden shares since only admins can have access to them. If you wish you can restrict access to these drives for Administrators by applying security permissions to the drive or folder itself. For example, below is an example of me denying local access to the F:\ drive on the server which will reflect to remote access as well.

Disabling shares folders ending with "$"-deny-ntfs-permissions.png

For more information on how to deny someone then please follow this tutorial - Permissions - Allow or Deny Users and Groups

The hidden shares can be disabled temporarily by right clicking and clicking on 'Stop Sharing' but please be advised that upon reboot the shares will reappear because they are a part of the service. Also, you cannot disable the IPC$ share and you also cannot access it since it isn't a share that has a folder structure but rather a tunnel allowing remote administration as stated earlier.

Hope This Helps,
Josh


My System SpecsSystem Spec
22 Aug 2013   #3

Windows 7 Ult, Windows 8.1 Pro,
 
 

Quote   Quote: Originally Posted by kokolo View Post
Hi guys,

First post here. I need some help how to disable shares folders, "C$", "IPC$", etc. In Computer Management, I tried right click on the folder and I don't have the "Stop Sharing" option (I have administration rights in my system). I know the dollar sign means that these folders are administrator shares, but I don't know if somebody outside or inside my network can see/connect to these folders, if they have the logon windows password. I don't think this is secure, because I can connect wirelessly to these folders with my phone, and even create files in my system.

I wanted to disable network discovery but I regularly use a wireless printer, so that's not an option. My only option is disabling these sharing "$"folders. Please how to do this? Thanks for any help.
Actually it is possible to have Network Discovery turned off while leaving File and Printer Sharing turned on.

This means that clients in the local network can still print through your machine but they won't be able to access any shared folders on your machine.
My System SpecsSystem Spec
.


Reply

 Disabling shares folders ending with "$"




Thread Tools




Our Sites

Site Links

About Us

Find Us

Windows 7 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 7" and related materials are trademarks of Microsoft Corp.

Designer Media Ltd

All times are GMT -5. The time now is 12:14 PM.
Twitter Facebook Google+



Windows 7 Forums

Seven Forums Android App Seven Forums IOS App
  

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33