Flash Drive admin shares

[zarkon4]

I have a security/forensics question for you all. When a flash drive is put into the usb port, why is it that there is not an admin share created. Is it possible to configure the computer to create an admin share? I am looking for a way to access the flash drive from another computer in an administrative/security/forensics perspective.

Any ideas?

 

[lhuegele]

I'm pretty sure administrative shares are only for fixed storage devices. I've never seen them for any type of removable storage, like floppy drives, flash drives, etc.

Have you tried to create a regular share to your flash drive?

 

[zarkon4]

I was able to remotely create an admin share (E$) on the device while it was plugged in, using Computer Management.

 

[lhuegele]

Well that's good to know. Does it persist even when you pull out the flash drive and then re-insert it?

 

[zarkon4]

Yes, but you can't access it until the flash drive is plugged in. I have found it works on cd drives as well.

 

[drew1701d]

I think the default file system flash drives are formatted with: typically FAT/FAT32 does not permit the admin share creation, the file system has to be NTFS or a CD flavor

"I'm certifiable, not certified. It just means my answers are from experience...not a book

 

[itaviator]

Yes, but you can't access it until the flash drive is plugged in. I have found it works on cd drives as well."


How else would you access the flash drive??

Systems Administrator