Help!

Can I access administrative C$ share without enabling admi..

 
Post new topic   General Reply to Topic (not reply to a specific post)    Forums Home -> Account Administration RSS
Next:  error code 0x80004005  
Author Message
Kelly
External


Since: Jan 19, 2007
Posts: 20



PostPosted: Fri Jan 19, 2007 12:16 pm    Post subject: Can I access administrative C$ share without enabling admin accoun
Archived from groups: microsoft>public>windows>vista>administration_accounts_passwords (more info?)

I'm looking for a way to access the C$ and D$ administrative shares from an
XP PRO to Vista Business RTM install.

I know I can do this by enabling the Administrator account on the Vista PC
and using that username and password, but would prefer not to have to open up
the machine that far if not necessary.

If I enable th administrator account and use that in the batch file, I can
see and use the drives and folders... but using the username and password I
use locally on the Vista PC (the one created during installation), the drives
and folders on them are not accessible.

This is the batch file;

echo off
set password=******
set username=xxxxxxx
cls
echo.
echo Deleting mapped drives
echo.
@if exist m:\nul net use m: /delete >nul
@if exist n:\nul net use o: /delete >nul
@if exist p:\nul net use p: /delete >nul
@if exist q:\nul net use q: /delete >nul
@if exist \\vista01\c$\nul net use \\vista01\c$ /delete >nul
@if exist \\vista01\ipc$ net use \\vista01ipc$ /delete >nul
echo.
echo Re-mapping desktop drives
echo.
@net use \\%username% %password% /user:%username% >nul
@net use m: \\vista01\c$ >nul
@net use n: \\vista01\d$ >nul
@net use p: \\vista01\dvdrw >nul
@net use q: \\vista01\dvd >nul
echo.
net use
pause
:end

It resulsts in mapped drives...New connections will not be remembered.


Status Local Remote Network

----------------------------------------------------------------------------
Disconnected M: \\vista01\c$ Microsoft Windows Network
Disconnected N: \\vista01\d$ Microsoft Windows Network
Disconnected P: \\vista01\dvdrw Microsoft Windows Network
Disconnected Q: \\vista01\dvd Microsoft Windows Network
Disconnected \\vista01\IPC$ Microsoft Windows Network
Back to top
Jimmy Brush
External


Since: Jun 23, 2006
Posts: 1214



PostPosted: Fri Jan 19, 2007 5:03 pm    Post subject: Re: Can I access administrative C$ share without enabling admin accoun [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

Hello,

As a new security feature, Windows Vista by default does not allow
non-domain administrators to use their administrator powers over a network
(except through remote desktop, if enabled). One drawback to this is that
there is no way to access the administrative shares on a default
installation of Vista.

To change this behavior without enabling the administrator account, you can
allow all vista administrator accounts to use their administrator powers
over the network by changing the following registry key:

- Click start
- Type: regedit
- Press enter
- In the left, browse to the following folder:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system\
- Right-click a blank area in the right pane
- Click New
- Click DWORD Value
- Type: LocalAccountTokenFilterPolicy
- Double-click the item you just created
- Type 1 into the box
- Click OK
- Restart your computer


- JB
Microsoft MVP - Windows Shell/User

Windows Vista Support Faq
http://www.jimmah.com/vista/
Back to top
Kelly
External


Since: Jan 19, 2007
Posts: 20



PostPosted: Sat Jan 20, 2007 12:00 pm    Post subject: Re: Can I access administrative C$ share without enabling admin ac [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

PERFECT solution... works like a charm...Thank you.
BTW, the system restart was not needed.

"Jimmy Brush" wrote:

> Hello,
>
> As a new security feature, Windows Vista by default does not allow
> non-domain administrators to use their administrator powers over a network
> (except through remote desktop, if enabled). One drawback to this is that
> there is no way to access the administrative shares on a default
> installation of Vista.
>
> To change this behavior without enabling the administrator account, you can
> allow all vista administrator accounts to use their administrator powers
> over the network by changing the following registry key:
>
> - Click start
> - Type: regedit
> - Press enter
> - In the left, browse to the following folder:
> HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system\
> - Right-click a blank area in the right pane
> - Click New
> - Click DWORD Value
> - Type: LocalAccountTokenFilterPolicy
> - Double-click the item you just created
> - Type 1 into the box
> - Click OK
> - Restart your computer
>
>
> - JB
> Microsoft MVP - Windows Shell/User
>
> Windows Vista Support Faq
> http://www.jimmah.com/vista/
>
Back to top
Jimmy Brush
External


Since: Jun 23, 2006
Posts: 1214



PostPosted: Sun Jan 21, 2007 11:53 am    Post subject: Re: Can I access administrative C$ share without enabling admin ac [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

You're welcome Smile.

- JB
Back to top
"cquirke
External


Since: Feb 11, 2007
Posts: 560



PostPosted: Sun Feb 11, 2007 10:19 pm    Post subject: Re: Can I access administrative C$ share without enabling admin accoun [Login to view extended thread Info.]
Archived from groups: per prev. post (more info?)

On Fri, 19 Jan 2007 17:03:27 -0500, "Jimmy Brush"

>As a new security feature, Windows Vista by default does not allow
>non-domain administrators to use their administrator powers over a network
>(except through remote desktop, if enabled). One drawback to this is that
>there is no way to access the administrative shares on a default
>installation of Vista.

I'm after the opposite; I'd like to be certain that no admin shares
(particularly those that offer full access to entire HD volumes) are
availible over any sort of network, no matter what credentials an
Internet or LAN entity may wave around.

XP Home used to be safe from this risk, in that null account password
or not, the hidden admin shares would not be network-accessible. Does
Vista Home Basic and Vista Home Premium enjoy the same benefit? Does
the answer change between Vista-32 and Vista-64?



>--------------- ---- --- -- - - - -
Saws are too hard to use.
Be easier to use!
>--------------- ---- --- -- - - - -
Back to top
Display posts from previous:   
Post new topic   General Reply to Topic (not reply to a specific post)    Forums Home -> Account Administration All times are: Eastern Time (US & Canada)
Page 1 of 1

 
You can post new topics in this forum
You can reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum