Hello. What AD accounts, other than Administrators, can access the default share on a client PC? (i.e. C$) I need to give some users rights to this and was hoping to do it w/out adding permissions on each client machine. Can this be done or is Administrators the only group that has access?
Tek-Tips is the largest IT community on the Internet today!
Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!
-
Congratulations strongm on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!
Access Default Share
- Thread starter Jaminj
- Start date
Members of the local administrators group on the PC also have permission to access the default shares (eg c$).
You can solve this by creating a security group within AD containing your user accounts and adding this to the local administrators group of the PC.
Alternatively, you can just reshare the C: drive with another share name and different permissions.
John
You can solve this by creating a security group within AD containing your user accounts and adding this to the local administrators group of the PC.
Alternatively, you can just reshare the C: drive with another share name and different permissions.
John
- Thread starter
- #3
Jaminj - you do realise that making them Domain Admins gives them all sorts of other privileges to the whole domain? Are these users ok to have that level of access?
John's suggestion would give them just the access they need to the PC in question, and no more.
John's suggestion would give them just the access they need to the PC in question, and no more.
- Thread starter
- #5
- Status
Similar threads
- Locked
- Question
