Source : http://support.microsoft.com/kb/816524
By default, Windows automatically creates special hidden administrative shares that administrators, programs, and services can use to manage the computer environment or network. These special shared resources are not visible in Windows Explorer or in My Computer, but you can use the Shared Folders tool in Computer Management to view them. Depending on the configuration of your computer, you may see some or all the following special shared resources listed in the Shares folder in Shared Folders:
Generally, Microsoft recommends that you do not modify these special shared resources. However, if you want to remove the special shared resources and prevent them from being created automatically, you can do this by editing the registry.
Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
By default, Windows automatically creates special hidden administrative shares that administrators, programs, and services can use to manage the computer environment or network. These special shared resources are not visible in Windows Explorer or in My Computer, but you can use the Shared Folders tool in Computer Management to view them. Depending on the configuration of your computer, you may see some or all the following special shared resources listed in the Shares folder in Shared Folders:
- DriveLetter$: Root partitions and volumes are shared as the drive letter name appended with the $ character. For example, drive letters C and D are shared as C$ and D$.
- ADMIN$: A resource that is used during remote administration of a computer.
- IPC$: A resource that shares the named pipes that you must have for communication between programs. Note that this resource cannot be deleted.
- NETLOGON: A resource that is used on domain controllers.
- SYSVOL: A resources that is used on domain controllers.
- PRINT$: A resource that is used during the remote administration of printers.
- FAX$: A shared folder on a server that is used by fax clients during fax transmission.
Generally, Microsoft recommends that you do not modify these special shared resources. However, if you want to remove the special shared resources and prevent them from being created automatically, you can do this by editing the registry.
To remove administrative shares by editing the registry
To remove administrative shares and prevent them from being automatically created in Windows:Important This section, method, or task contains steps that tell you how to modify the registry. However, serious problems might occur if you modify the registry incorrectly. Therefore, make sure that you follow these steps carefully. For added protection, back up the registry before you modify it. Then, you can restore the registry if a problem occurs. For more information about how to back up and restore the registry, click the following article number to view the article in the Microsoft Knowledge Base:
322756
(http://support.microsoft.com/kb/322756/ )
How to back up and restore the registry in Windows- Click Start, and then click Run.
- In the Open box, type regedit, and then click OK.
- Locate, and then click the following registry key:HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters\AutoShareServer
- On the Edit menu, click Modify. In the Value data box, type 0, and then click OK.
- Quit Registry Editor.
- Stop and then start the Server service. To do so:
- Click Start, and then click Run.
- In the Open box, type cmd, and then click OK.
- At the command prompt, type the following lines. Press ENTER after each line:net stop server
net start server - Type exit to quit Command Prompt.