Monday, May 21, 2012 9:47 AM
I have a small query.In my environment we have more than 30,000 clients.I need to know what are the machines is having admin rights (C$ and admin$).
is there any WQl query.can any one help me on this..
just let me check will share you with the result.
Monday, May 21, 2012 11:26 AM
until you dont have any GPO or port/firewall(File and Print Sharing needed) to disable admin$ share,it will be accessble .
It would be difficlt to check on all machines if admin$ share is enabled but there are tools to check if admin$ enabled but that is tedious job really..
if you are looking for SCCM report(SQL) or collection(WQL) ,you will have to edit SMS_DEF.MOF file and change shares name to get these detials.
[ SMS_Report (FALSE),
Monday, May 21, 2012 2:30 PMThis is a perfect and simple task for DCM as it's completely dictated by a single registry value: http://www.petri.co.il/disable_administrative_shares.htm
Jason | http://blog.configmgrftw.com | Twitter @JasonSandys