SharedLogic
asked on
Administrative shares on Active Directory server keep disappearing
Hello you
Our Active Direcotory server has Panda Administrator (antivirus software console) installed and unless the C: drive is shared as C$ and \WINNT shared as Admin$ then Panda Administrator does not function properly. I have shared both as required but the shares are not permanent. I have not discovered what event causes both shares to disappear, it happens even without a reboot. I use Terminal Services to log in to the machine regularly and I have just checked that the shares did not disappear after logging out and in.
This is our only DC machine, we have Exchange running on a member server which does not have this problem.
A Panda support person pointed me in the direction of security policies but I do not know what to look for and whether to look in "Domain Controller Security Policy", "Domain Security Policy" or "Local Security Policy" which all appear in Administrative Tools. In "Domain Security Policy" I did find "Create permanent shared objects" and two groups are listed: Administrators and OURDOMAIN\Domain Admins. Is this the default? Should I need to change the default settings?
Thanks in advance for any suggestions, complete solutions
Simon
Our Active Direcotory server has Panda Administrator (antivirus software console) installed and unless the C: drive is shared as C$ and \WINNT shared as Admin$ then Panda Administrator does not function properly. I have shared both as required but the shares are not permanent. I have not discovered what event causes both shares to disappear, it happens even without a reboot. I use Terminal Services to log in to the machine regularly and I have just checked that the shares did not disappear after logging out and in.
This is our only DC machine, we have Exchange running on a member server which does not have this problem.
A Panda support person pointed me in the direction of security policies but I do not know what to look for and whether to look in "Domain Controller Security Policy", "Domain Security Policy" or "Local Security Policy" which all appear in Administrative Tools. In "Domain Security Policy" I did find "Create permanent shared objects" and two groups are listed: Administrators and OURDOMAIN\Domain Admins. Is this the default? Should I need to change the default settings?
Thanks in advance for any suggestions, complete solutions
Simon
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
the default setting is "1". Look at this article:
http://www.pureperformance.com/js/showtip.asp?id=55
What i assume by"created automatically" is that if the value is "0", the shares are not created automatically.
http://www.pureperformance.com/js/showtip.asp?id=55
What i assume by"created automatically" is that if the value is "0", the shares are not created automatically.
ASKER
I'm not sure that created "automatically" should mean the same as "retain the administrative share created by an overworked network administrator", but a week has passed and the shares are still there after making your suggested change, so...
...well done, and thanks!
...well done, and thanks!
ASKER
Interesting article though. With reference to it's instructions (shown below), the value in the registry key was set to zero on our Active Directory server. I am happy to change this to 1 if anyone else can confirm that they have the same setting by default. The article does not make it clear what the default setting should be, and I don't understand the context of "If the AutoShareServer key is set to 0, administrative shares (such as C$, D$, Admin$, and so on) cannot be created automatically". Automatically by what?
Our Exchange (domain member) server does not have the AutoShareServer key so I assume it applies only to domain controllers.
Here are the instructions from that article (and thanks for your help):
Start Registry Editor (Regedt32.exe).
Locate and click the following key in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\
Either change the value of the AutoShareServer key to 1 or delete the value.
NOTE: If the AutoShareServer key is set to 0, administrative shares (such as C$, D$, Admin$, and so on) cannot be created automatically.
Quit Registry Editor.