Administrative share

Administrative shares are a collection of automatically shared resources including the following: • Disk volumes: Every disk volume on the system with a drive letter assignment has a corresponding administrative share named as the drive letter with an appended dollar sign ($). For example, a system that has volumes C:, D: and E: has three corresponding administrative shares named , and . (NetBIOS is not case sensitive.) • OS folder: The folder in which Windows is installed is shared as . • Fax cache: The folder in which faxed transmissions and their cover pages are cached is shared as . • IPC shares: This area, used for inter-process communication via named pipes, is shared as and is not part of the file system. • Printers folder: This virtual folder, which contains objects that represent installed printers is shared as . • Domain controller shares: The Windows Server family of operating systems creates two domain controller-specific shares called and which do not have dollar signs ($) appended to their names. == Characteristics ==

Administrative shares have the following characteristics: • They are hidden. The "$" appended to the end of the share name means that it is a hidden share. Windows will not enumerate them among those it defines in response to typical queries by remote clients to obtain the list of shares. One needs to know the name of an administrative share in order to access it. Not every hidden share is an administrative share nor is the reverse true; in other words, ordinary hidden shares may be created at the user's discretion. • They are automatically created by Windows, not a network administrator, and if deleted they will be automatically re-created. Administrative shares are not created by Windows XP Home Edition. == Management ==

Administrative shares can be deleted in the same manner as any other network share, however they will be recreated automatically during the next boot cycle. Previous Versions for local files, a feature of Windows Vista and Windows 7 before being rebranded as File History in Windows 8 and beyond, requires administrative shares in order to function properly. == Restrictions ==

Windows XP implements "simple file sharing" (also known as "ForceGuest"), a feature that can be enabled on computers that are not part of a Windows domain. When enabled, it authenticates all incoming access requests to network shares as "Guest", a user account with very limited access rights in Windows. This effectively disables access to administrative shares. By default, Windows Vista and later use User Account Control (UAC) to enforce security. One of UAC's features denies administrative rights to a user who accesses network shares on the local computer over a network, unless the accessing user is registered on a Windows domain or using the built in Administrator account. If not in a Windows domain it is possible to allow administrative share access to all accounts with administrative permissions by adding the LocalAccountTokenFilterPolicy value to the registry. == See also ==