How-to: Enable access to Windows Administrative Shares

How to enable access to Windows Administrative Shares C$, D$ etc

The default shares are automatically setup on every hard drive partition in the system. They grant access to anyone who is a member of the local Administrators group, either directly or inherited through global groups such as Domain Admins.

In Windows Vista and above, UAC remote restrictions must be lifted either via Policy or with the registry modification below.

REG add HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\system /v LocalAccountTokenFilterPolicy /t REG_DWORD /d 1 /f

The change will take effect immediately.

The LocalAccountTokenFilterPolicy registry entry in the registry can have a value of 0 or of 1

Value Description
0 This value builds a filtered token. This is the default value. The administrator credentials are removed.
1 This value builds an elevated token.

You may also need to enable File and Printer Sharing. in the Control Panel > Network and Sharing Center > Advanced Sharing.

In addition to this, File and Printer Sharing must be enabled through the Windows firewall.

“Trust is a core currency of any relationship. Sometimes our need to control and micromanage everything erodes our confidence in ourselves and others. The truth: People are much more capable than we think. A hearty dose of trust is often what's needed to unlock the magic. Go ahead, have faith” ~ Kris Carr

Related commands

Q951016 - Description of User Account Control and remote restrictions in Windows.
NET SHARE - Create file and printer shares.
NET USE - Connect to a file/print Share (Drive Map)

Copyright © 1999-2023
Some rights reserved