Don’t Bother Deleting C$

Written by on Wednesday, March 5, 2008 5:24 - 0 Comments
Why deleting the C$ share is not a good idea.
Some admins like to delete the C$ share, the automatic hidden share of the system volume. This share is generally needed for remote administration and access is restricted to administators, but since it’s potentially an open door into their systems some admins would rather it were closed.

Unfortunately, deleting C$ is one of those security ideas that *sounds* like a great idea but really isn’t so great after all. That’s because the share will be automatically re-created whenever your server restarts, or when you stop and start the Server service. You can get around this by creating a logon script that will delete the share (see here for info) but consider how deleting this share will affect your ability to remotely administer your servers before you start closing supposed security “holes” like this. Remember, the more secure a system is made, the less managable (and less usable) it becomes. There comes a point in the tradeoff when it just doesn’t make sense performing certain lockdown steps because the result is that your server becomes a pain to manage.

<!– <<

Article written by

Leave a Reply

You must be logged in to post a comment.

2003 server - Sep 30, 2008 22:34 - 0 Comments

instant messaging srv records

More In Computers & PC

Microsoft Outlook - Mar 22, 2009 11:22 - 0 Comments

Outlook: Duplicates in Mailbox

More In Computers & PC