Link to home
Start Free TrialLog in
Avatar of WAMSINC
WAMSINCFlag for United States of America

asked on

instructions on how to enable admin$ on PC's via Group Policy

hi experts I cannot find specific instructions for enabling the admin$ share on all PC's in my domain. I must be using the wrong keywords on google. Any assistance is appreciated
thanks
Avatar of John
John
Flag of Canada image

So far as I know, users must be domain admins to use this share.
Avatar of WAMSINC

ASKER

we have some software that requires \\PCNAME\ADMIN$ to be enabled on all PC's.
I would like to do this through group policy if possible
ASKER CERTIFIED SOLUTION
Avatar of Hypercat (Deb)
Hypercat (Deb)
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of WAMSINC

ASKER

Something must have been changed from default before I got here, when I got from my pc logged in as domain admin and start > run type \\COMPUTERNAME\\ADMIN$ or \\COMPUTERNAME\C$ I cannot connect on many PC's but I can on some. Or is that a firewall setting ?
If windows firewall is on, you will not be able to connect to anything on those computers unless specific rules are added, or the firewall is turned off
Yes - what themrrobert said.  I forgot to mention that! You would have to add firewall rules to access the admin shares, and that could be done through group policies using the Computer policies under Security Settings/Windows Firewall with Advanced Security.
Avatar of WAMSINC

ASKER

just found out some previous guy disabled it on many PC's here so is there a way to enable it globally with group policy ?

I will create a policy to disable the PC firewalls also
Did he remove access to it, or did he actually remove the admin$ shares?  If the shares are there but access has been denied, you should be able to re-enable access using the Windows Firewall with Advanced Security section under the Computer Configuration as I mentioned above.  What you need to do is add a rule to allow File and Print Sharing.
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of WAMSINC

ASKER

so I found a technet article to enable the shares, but when browsing through group policy the "autoshareserver" is not available and I dont see a way to add it via GPO creation
Avatar of WAMSINC

ASKER

I have mostly windows 7 out there right now, currently testing the disable firewall GPO which was applied to all workstations out there.  We dont have any XP machines any more. That link looks perfect except we have very few win 8 machines out there
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Avatar of WAMSINC

ASKER

the combo of disabling the firewall GPO and this win 8 policy appears to be working for all the win 7 machines on my network now. Going to do some more testing. Really appreciate the replies guys
No problem :) Be sure to select the best/most accurate/useful answer(s) when you're done.

Best of luck!