The odd bit Once is an accident, twice is a coincidence, three times is an enemy action.

6Sep/0914

Administrative shares in Windows 7

Those who have experience with NT-based operating systems on a network will certainly be familiar with the concept of administrative shares. If that doesn't ring a bell, you access them like \\computername\c$. With this intro and the title of this post, you might be alarmed or enter panick mode fearing they might be gone in Microsoft's latest OS iteration. Well don't go into cardiac arrest because they are still there... but of course not without the odd problem.

Windows 7 still creates the administrative shares on install, but you can't use them out of the box. First of all, you need to have File and Printer Sharing enabled. And the way to do that has once again been changed:

  1. Open the control panel.
  2. Go to Network and Internet.
  3. Go to Network and Sharing Center.
  4. In the left column, click on Change advanced sharing settings.
  5. There are two profiles. You probably don't want this on when you're on a public network so open Home or Work.
  6. Under the header File and Printer sharing, select the Turn on... option.

And now your administrative shares still don't work :-P You've just completed step 1 which implies there's at least a step 2 and here it is: you also need to change the registry.

  1. Click on the orb (= the round button with the Windows logo in the taskbar) and type regedit in the search box.
  2. Open the registry editor.
  3. Navigate all the way to HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System.
  4. Right-click in the pane on the right side and add a new DWORD (32-bit).
  5. Give the new setting the name LocalAccountTokenFilterPolicy.
  6. Double click on that setting and give it a value of 1.

It's probably wise to reboot after doing this, although it might not be needed. I'm not sure if it works straight away because I rebooted without trying.

Anyways, if you're lucky you will be able to access administrative shares after performing these steps. If you're unlucky, like me, doing all these things appears to have zero effect at all. Once again don't panick, because there's another hint/tip/solution coming your way.

Somewhere at some point during the installation or configuration of Windows 7, you will be asked to do something with a thing called Homegroup. It's some weird new sharing tool that looks OK but isn't quite what you're used to. Once you have enabled that feature, you won't be able to use the administrative shares. So the tip is: disable the homegroup feature.

  1. Open the control panel.
  2. Go to Network and Internet.
  3. Go to HomeGroup.
  4. Click on the blue link Leave the homegroup.

The popup dialog should point out itself, but I believe I picked to first option. Once I had left the homegroup, the administrative shares started working again.

I hope this post can help anyone who experiences the same problem.

Comments (14) Trackbacks (0)
  1. Great stuff many thanks and it works without a reboot! :)

  2. Thanks! It worked! I had to do the first 2 steps and reboot. Computer is part of the homegroup though…

  3. Nothing from above worked :(
    When i had Win7 on one and XP on other computer i could easily do admin shares between them. Today I installed win7 on the other one two, and cant do file sharing between them. Got no idea why

  4. why i there no function in Win7 to “stop sharing” adminis shares in Computer Management like there is with previous versions of Windows? I don’t want these shared when I’m on public network. Too many vulnerabilities.

  5. Hey, I just wanted to say thanks! I already had file and print sharing enabled for my “Home” profile. I made the reg change, rebooted and it was good to go! My PC is part of a homegroup but I don’t use it.

  6. Freakin awesome, dude. Thanks for the info.

  7. Worked for me. No Reboot required.

  8. hmm, strangely doesn’t work for me at all :(

  9. Funny part is I have 2 windows 7 box A and B. From A I can access \\b\c$, but from B I get access denied when accessing \\a\c$. I tried all the steps here, but the results does not change at all. Is there anything more weird than this?

  10. Just wanted to leave my experience after following this little tutorial. I have Windows 7 Ultimate 64bit. I was able to access Administrative shares without a reboot. Quick note about Homegroup setup. If there are no other Windows 7 PCs on your network, it is absolutely not necessary.

  11. Perfect, I’d done all the prior steps but neglected to leave the Homegroup. Stupid feature in a Professional flavour of an OS. (but then, I still hanker for MS-DOS 6 ;-)

    Cheers!
    Chris

  12. I feel there are too many vulnerabilities.

  13. Damn, why the hell does microsoft make us do all this crap to get functionality we already had in previous Windows?

    This is counter-productive. Screw M$

  14. Required a reboot after step 2.

    Thanks!


Leave a comment


Powered by WP Hashcash

No trackbacks yet.