Access to server drive admin shares

[Maxell]

Hello,

 

I have discovered an issue where about 50% of our servers allow browsing to the root drive admin shares (\\server\c$ for example) from other non-domain servers plugged into the LAN, without asking for login details. When trying this from a non-server OS, I am prompted for login first.

 

Can anyone shed any light as to why this happens? It is a little concerning...

[glen_j]

do you have the same administrator password when logging onto the non domain servers?

[Maxell]

No, different password but same username.

[Maxell]

Actually, the local administrator password on the domain joined servers may well be the same. I'll test this now....

[caffrey]

You could hide the servers too with

 

NET CONFIG SERVER /HIDDEN:YES

 

to stop people from browsing to your servers.

[zag]

You could hide the servers too with

 

NET CONFIG SERVER /HIDDEN:YES

 

to stop people from browsing to your servers.

 

Yep, we do that on all our servers. Works great.

[Maxell]

Thanks, the password did match, problem solved.

 

Might well hide the servers now too; I assume it doesn't stop access to shares in any way if you happen to know the path?

[zag]

Thanks, the password did match, problem solved.

 

Might well hide the servers now too; I assume it doesn't stop access to shares in any way if you happen to know the path?

 

Yep. It just hides the servers so students cant browse or try to hack them from "network places".

 

We've had zero problems since we did this. I can browse to them directly just by typing their names in windows explorer.