Win2k3 C$ Permissions - Modifying

Hello,

I would like to modify the default admin share (c$) permissions to give a
specific user Read only access.

I'm not able to modify the default permissions, as expected.

My question is; if I disable the administrative share creation through the
registry (http://support.microsoft.com/kb/816524) what potential problems
would there be - more specifically if I recreated the c$ manually and added
the following permissions, would it act the same or would I be missing
anything?

Administrators [Full]
SYSTEM [Full]
MyUser [Read]

Thanks!
-B

--
Brock Hensley
http://BHensley.com

Hello Brock,

Do not change the default permissions for one user. If that one needs acccess
to a special folder on the c-drive use only that folder to configure the
needed permissions.

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm


> Hello,
>
> I would like to modify the default admin share (c$) permissions to
> give a specific user Read only access.
>
> I'm not able to modify the default permissions, as expected.
>
> My question is; if I disable the administrative share creation through
> the registry (http://support.microsoft.com/kb/816524) what potential
> problems would there be - more specifically if I recreated the c$
> manually and added the following permissions, would it act the same or
> would I be missing anything?
>
> Administrators [Full]
> SYSTEM [Full]
> MyUser [Read]
> Thanks!
> -

Hello,

While I agree, the problem is that we are using an older application that is
coded to access remote computers through the default admin c$ share (eg.
\\ip\c$\destfolder)

Instead of creating the same username/password used for the service identity
on all remote machines and giving that user Administrator access, I'd like
to remove the default c$ share and recreate my own so that I may add special
restricted permissions for the single user so that I can take it out of the
Administrators group but still access the c$ share.

Thanks,
--
Brock Hensley
http://BHensley.com
==
"Meinolf Weber [MVP-DS]" <meiweb(nospam)@gmx.de> wrote in message
news: .com...
> Hello Brock,
>
> Do not change the default permissions for one user. If that one needs
> acccess to a special folder on the c-drive use only that folder to
> configure the needed permissions.
>
> Best regards
>
> Meinolf Weber
> Disclaimer: This posting is provided "AS IS" with no warranties, and
> confers no rights.
> ** Please do NOT email, only reply to Newsgroups
> ** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm
>
>> Hello,
>>
>> I would like to modify the default admin share (c$) permissions to
>> give a specific user Read only access.
>>
>> I'm not able to modify the default permissions, as expected.
>>
>> My question is; if I disable the administrative share creation through
>> the registry (http://support.microsoft.com/kb/816524) what potential
>> problems would there be - more specifically if I recreated the c$
>> manually and added the following permissions, would it act the same or
>> would I be missing anything?
>>
>> Administrators [Full]
>> SYSTEM [Full]
>> MyUser [Read]
>> Thanks!
>> -B
>
>