Why can domain users access to admin shares on my servers?

[Guest L Marshall]

Hi!,

 

I have just discovered that for some reason the domain users in my

server2003 environment can access administrative shares on the servers in my

domain. This is a server 2003 domain.

 

How can this be and how can i resolve it.

 

at present if a domain user types \\servername\C$ they would get to the

admin share.

 

Look forward to some comments.

[Guest USN9AWM@gmail.com]

Remove the domain users group from the read permissions on the ntfs

and share permissions. You can also make this change via GPO I

believe.

[Guest L Marshall]

Hi!

 

Thanks for your reply - i have just looked at the secuirty tab, when i right

click on the C drive on my DC and domain users have read/execute access. Is

this my problem?

 

Does the DC have to allow read/write access to its domain users. I have

looked at our other servers and they have this also.

 

Let me know your ideas...................

 

On an admin share also you cant edit the share privilages.