Why can domain users access to admin shares on my servers?

[L Marshall]

Hi!,

I have just discovered that for some reason the domain users in my
server2003 environment can access administrative shares on the servers in my
domain. This is a server 2003 domain.

How can this be and how can i resolve it.

at present if a domain user types \\servername\C$ they would get to the
admin share.

Look forward to some comments.

 

[USN9AWM@gmail.com]

Remove the domain users group from the read permissions on the ntfs
and share permissions. You can also make this change via GPO I
believe.

 

[L Marshall]

Hi!

Thanks for your reply - i have just looked at the secuirty tab, when i right
click on the C drive on my DC and domain users have read/execute access. Is
this my problem?

Does the DC have to allow read/write access to its domain users. I have
looked at our other servers and they have this also.

Let me know your ideas...................

On an admin share also you cant edit the share privilages.