Administrative shares on Active Directory server keep disappearing

Hello you

Our Active Direcotory server has Panda Administrator (antivirus software console) installed and unless the C: drive is shared as C$ and \WINNT shared as Admin$ then Panda Administrator does not function properly. I have shared both as required but the shares are not permanent. I have not discovered what event causes both shares to disappear, it happens even without a reboot. I use Terminal Services to log in to the machine regularly and I have just checked that the shares did not disappear after logging out and in.

This is our only DC machine, we have Exchange running on a member server which does not have this problem.

A Panda support person pointed me in the direction of security policies but I do not know what to look for and whether to look in "Domain Controller Security Policy", "Domain Security Policy" or "Local Security Policy" which all appear in Administrative Tools. In "Domain Security Policy" I did find "Create permanent shared objects" and two groups are listed: Administrators and OURDOMAIN\Domain Admins. Is this the default? Should I need to change the default settings?

Thanks in advance for any suggestions, complete solutions

Simon
SharedLogicAsked:
Who is Participating?
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

adonis1976Commented:
interesting... so they just get kinda deleted then? I dont think personally it is a security policy setting, because you told that even if you reboot the machine the shares still stay on... and when a machine starts, the security policies surely gets applied. One thing however would be good to look at Domain security policy if it has anything to do with the admin shares setting.

the two groups you mentioned are default and you don't have to change those.

here is a link that tells how to restore missing admin shares..it might be useful to u:

http://support.microsoft.com/default.aspx?scid=kb;en-us;318755&Product=win2000
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
SharedLogicAuthor Commented:
I don't know that if shares stay on if I do reboot. They stay on if I log off an on again, and they do disappear without me rebooting, I just don't know when they disappear.

Interesting article though. With reference to it's instructions (shown below), the value in the registry key was set to zero on our Active Directory server. I am happy to change this to 1 if anyone else can confirm that they have the same setting by default. The article does not make it clear what the default setting should be, and I don't understand the context of "If the AutoShareServer key is set to 0, administrative shares (such as C$, D$, Admin$, and so on) cannot be created automatically". Automatically by what?

Our Exchange (domain member) server does not have the AutoShareServer key so I assume it applies only to domain controllers.

Here are the instructions from that article (and thanks for your help):

Start Registry Editor (Regedt32.exe).
Locate and click the following key in the registry:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters\AutoShareServer

Either change the value of the AutoShareServer key to 1 or delete the value.

NOTE: If the AutoShareServer key is set to 0, administrative shares (such as C$, D$, Admin$, and so on) cannot be created automatically.
Quit Registry Editor.

0
adonis1976Commented:
the default setting is "1". Look at this article:

http://www.pureperformance.com/js/showtip.asp?id=55

What i assume by"created automatically" is that if the value is "0", the shares are not created automatically.



0
SharedLogicAuthor Commented:
I'm not sure that created "automatically" should mean the same as "retain the administrative share created by an overworked network administrator", but a week has passed and the shares are still there after making your suggested change, so...

...well done, and thanks!
0
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Windows 2000

From novice to tech pro — start learning today.

Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.