• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 5338
  • Last Modified:

Admin Share ADMIN$ is missing and I am not able to re-create the share

I have a PC on the network that is missing the ADMIN$ share. re-booting the machine does not re-create the share as other sites have suggested. I can't re-create the share manually. Without this share I can't install my Symantec Corp Edition Anti-Virus 10.0 app to this PC. I have looked high and low and can't find an answer. Please help as the PC is running on the network without any anti-virus app installed.
0
soupy28
Asked:
soupy28
  • 7
  • 7
  • 3
  • +2
1 Solution
 
jasonduncan76Commented:
Check out this article

http://support.microsoft.com/default.aspx?scid=kb;en-us;842715


When you log into the pc is it going to  a domain?
Can you see it from the server?
0
 
fm250Commented:
login locally to the pc or check for viruses/spyware if you did not run an application that change those shares ADMIN$, C$.
Else check if the system was n't hacked.

hope this helps
0
 
soupy28Author Commented:
Yes, the PC is on a Domain named ENG within our company. I am able to browse all network shares and resources from this PC, including Internet and email. I cannot however, connect to this PC remotely or send anything to the PC's shared printer, even though the printer indicates that it is shared.
Yes, I can see the PC from the Server and by using VNC, logon to the PC from my office.
Like I said though, I can't re-install the Symantec Corp Anti-Virus to this PC as the error message comes up that there is no ADMIN share.
I have installed and run Spybot and Ad-aware.
I have also installed and run the BitDefender online virus scanner, the Panda Activescan online scanner and updated the Java to the latest version.
0
Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

 
aindelicatoCommented:
How are you trying to recreate the share??

When locally logged on, it's quite easy:

START > RUN > CMD <enter>

net share Admin$ <enter>

(note that you can not specify a path!)

The PATH is implied and Windows knows how to handle it.
0
 
soupy28Author Commented:
Ok - I have the shares restored:
When I do a Net Share from this PC  I get the following report:
C$
ADMIN$
IPC$
PRINT$
However, when I try to map the drive using \\username\c$ I get the error:
The mapped network drive could not be created because the following error has occured:
Logon failure: the user has not been granted the requested logon type at the computer.

In addition, I still can't remotely re-install Symantec Corp Edition Anti-Virus. When I try I get an error message at the Server which states:
Logon failure: the user has not been granted the requested logon type at this computer.

I am logged on as the Administrator on the server.
0
 
fm250Commented:
\\username\c$

should be \\computerName\c$
or  \\ip-address\c$

you should be prompt for user name and pass

make sure you have full control on the c:\ on the server
0
 
soupy28Author Commented:
I appologize for the incorrect typing of the command.
I am typing \\computername\c$
0
 
fm250Commented:
Did you try the full control or taking ownwership on that drive?
0
 
aindelicatoCommented:
Make sure your user is in the local admin group of the workstation you are trying to connect to.

Also, make sure the Windows Firewall or any firewall is disabled.
0
 
marce_litoCommented:
if you use windows xp service pack 2, make sure that the administrative user that you use to access the share doesn't have a blank password
0
 
soupy28Author Commented:
fm250 - I took ownship of the entire drive as Administrator - Still unable to connect to the system remotely or map the shared admin drive.

aindelicato - The user is listed in the local admin group of this PC and the Windows firewall app is disabled.

marce_lito - This PC is running XP Pro - SP2. The Administrative share passord is complete and is not blank.

-----------------------------

I just want to make sure that everyone understands the issues here.
1. The biggest concern is the inability to install and maintain the Symantec Corp Edition 10.0 Anti-Virus from the Server.
2. No one on the network can print to the printer attached to this PC, even though it is listed as a shared printer in the printer folder.
3. I am unable to map the 'C' drive using \\computername\c$.
4. Although I can connect to the PC through Computer Management, I am unable to read the event view or display anything from the tree.
Thanks again to all of you for all the help so far, but I am still pretty much where I started.
David
0
 
fm250Commented:
David
login locally and look carefully to the services and installed program. also check running services to see if you find any suspected one. if nothing work for you, then I would suggest that you repair the system.
hope this helps!
0
 
fm250Commented:
Thanks David
0
 
soupy28Author Commented:
Thanks to everyone for the help on this issue, but I have wasted enough time on this problem, and have deceided that the best way to handle it is to save the data off the PC, re-fromat the drive and then re-install the OS (WinXP Pro) and all other required applications.
I have not been able to achieve the goals of being able to:
1. Install Symantec Corp Edition AntiVirus remotely from the Server.
2. Map the 'C' drive using the administrative share name C$
3. Manage the computer remotely using the Manage tool under My Comuter.
4. Print to the shared printer on this PC.
Just so everyone knows, this all started to happen the day this person received a message on AIM, from another person on their buddy list, to click on a link for some funny website. When they did this, it took them to a site that had them download a .pif file that installed on their system. After that, everything went to hell in a handbasket. My research led me to a site to download a "Fixaim.exe" file to remove the virus that had been installed. That seemed to work to remove the virus - see log below:

AIMFix version: 1.5.514.021
SeDebug Privilege set successfully

***ANY VIRUS FILES REMOVED WILL BE LISTED BELOW***

Now checking for Block-Checker via BlockRemove(): .5
Checking for Block-Checker files...
Block-Checker not found
ServiceExists(): Found service comrepl
StopService(): failed on call to ControlService() for "comrepl": The requested control is not valid for this service.
Service comrepl successfully disabled
Service comrepl successfully deleted
Now attempting quarantine of "comrepl" executable: C:\WINDOWS\comreplsvc.exe
C:\WINDOWS\comreplsvc.exe quarantined
C:\DOCUME~1\Russ\LOCALS~1\Temp\iinstall.exe found, attempting to remove...
C:\DOCUME~1\Russ\LOCALS~1\Temp\iinstall.exe quarantined
Profile for russgund edited to remove possible virus code.

***RUN COMPLETED. ANY FILES REMOVED LISTED ABOVE***
----------------------------------------------------------

But I am at the point now where this PC is still not operating correctly. If anyone has any 'new' ideas, please let me know, otherwise come 4:30 she is getting unplugged and taken home for a total cleanup.
Soupy
0
 
aindelicatoCommented:
FYI Soupy,

The facts in your last post were extremely important ones which, had been provided in your original request, the experts could have offered much different options.

Knowing the root cause of the problem is always best in determining a solution.

Your GOAL as you state is different from the title and jist of the question posted.  Please try to be clearer next time you ask for help.
0
 
fm250Commented:
why don't you try to install another AV and scan your pc. something like avg:  http://free.grisoft.com/doc/2/lng/us/tpl/v5

and/or try to install a free spyware removal and scan.
0
 
soupy28Author Commented:
aindelicato - Thanks for the input. You are correct that the issues changed somewhat from the original problem, but I thought that once I was able to 'restore' the ADMIN$ share on this PC, all my troubles would go away. It wasn't until recently that I put two and two together and determined that the AIM site was probably the site responsible for this entire mess.

fm250 - I have installed and run both Spybot and Ad-aware... No help; I have installed and run the Antivirus app that comes as part of VCOM's system suite... No help; I am going to download and install the AVG antivirus just to see if it helps any. Thanks again to everyone for their time and help with this PC's issues. It has been a great experience so far and I very glad to have joined.
David
0
 
fm250Commented:
David,
If you are going to re-format the drive, make sure you Do NOT select the quick format. I have seen many problems with systems that were refomated with quick format. I don't know the reason though.
0
 
soupy28Author Commented:
Thank-you for the advise... I never quick format anything these days, as like you, I have also had problems in the past.
0

Featured Post

Vote for the Most Valuable Expert

It’s time to recognize experts that go above and beyond with helpful solutions and engagement on site. Choose from the top experts in the Hall of Fame or on the right rail of your favorite topic page. Look for the blue “Nominate” button on their profile to vote.

  • 7
  • 7
  • 3
  • +2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now