asked on Exchange 2003 default shares?
On our Exchange 2003 server there are two shares that were created by the default installation of Exchange. The shares are:
address - C:\Program Files\Exchsrvr\address
res - C:\Program Files\Exchsrvr\res
Address contains 6 subdirectories (ccmail, gwise, ms, notes, smtp, x400) and inside those folders is an i386 folder with one DLL file
res contains some more DLL files.
I do not want to delete the folder, I just want to know why it is shared by default. It comes up as a 'high security risk' in our Nessus scan so we want to look into this issue.
address - C:\Program Files\Exchsrvr\address
res - C:\Program Files\Exchsrvr\res
Address contains 6 subdirectories (ccmail, gwise, ms, notes, smtp, x400) and inside those folders is an i386 folder with one DLL file
res contains some more DLL files.
I do not want to delete the folder, I just want to know why it is shared by default. It comes up as a 'high security risk' in our Nessus scan so we want to look into this issue.
Exchange
Last Comment
Hotzenwalder
The default shares created by Exchange upon install grant Everyone read to logging files and resources:
C:\Program Files\Exchsrvr\ADDRESS
C:\Program Files\Exchsrvr\.log
C:\Program Files\Exchsrvr\RES
Only administrators require full access to those files and directories
C:\Program Files\Exchsrvr\ADDRESS
C:\Program Files\Exchsrvr\.log
C:\Program Files\Exchsrvr\RES
Only administrators require full access to those files and directories
ASKER
So don't change the share rights and don't change the NTFS rights. I guess no harm can be done by leaving it as is.
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
ASKER
No indepth explanation
For example, if you un-share the netlogon share then user logons, group policies and scripts among other things will fail. If you disable the exchange share, then users won't be able to access the exchange addresses. If you disable the client share, then the add user wizard will not work.
It is very important you understand what the shares are and that disabling them can cause unforseen problems on your network.
http://www.windowsitpro.com/Article/ArticleID/37527/37527.html?Ad=1