Admin$ share

A hidden share is marked by a dollar sign ($) at the end of the share name. Hidden shares are not listed when you browse the shares on a computer or use the command net net view.

 

The system folder c:\windows (Variable %SYSTEMROOT%) is shared as ADMIN$. This administrative share allows the administrator remote access to the local Windows folder of the computer on the network.

 

If you want to to scan a Windows 8/7/Vista workgroup computer please consider following notes.

 

How to check whether Admin$ is available on the workstation

On the workstation at the command prompt (Start> All Programs> Accessories> Command Prompt) run the net share command. Admin$ should be displayed as a share.
From any computer on the network enter into the Windows Explorer the address: \\target_machine\admin $
Alternatively, at the command prompt (e.g.cmd ) dir \\target_machine\admin$
You can now see the Windows folder on the desktop.
These programs show you all the available admin shares on the network: Microsoft Baseline Security Analyzer (free);
GFI LAN guard - Network Security Scanner (paying); Hyena (paying).

 

 

Creating the administrative share Admin$

Follow these steps if the Admin$ share on a computer is not available:

1.Double-click on Administrative Tools in the Control Panel, and then click Computer Management.
2.Expand the Shared folder, click with the right mouse button on Shares, and click New File Shares.
3.Enter in the field Folders To Be Shared the path %SYSTEMROOT%.
4.Enter: Admin$, and click Next.
5.Check the box Administrators have full control, other users have no access to restrict access to the release to  administrators.
6.Click Finish.
7.Click No, to go back to the Computer Management console.

 

Alternatively, you can access the local computer at the command prompt (execute cmd) and execute the command net share admin$.

 

See also

 

Diese Seiten dürfen nur mit ausdrücklicher Genehmigung der Neuber Software GmbH kopiert werden.