This one's easy. Any windows server always has these default administratively hidden shares too c$ d$, etc. So does VNX. By default the only users that will ever have access to this share are those that are in the local administrators group of the NAS server (or windows server BTW) in question. If you try via a computer management MMC, you can't even change the access rights to the c$ share, you get a pop-up saying that:
"This has been shared for administrative purposes. The share permissions and file security cannot be set."
Which is fine, it's not a risk as long as you're careful about whom you let be a local admin. This is by default, only domain admins, and perhaps the user who actually joined the NAS server to Active Directory in the first place.
crklosterman
450 Posts
622
0
Posted October 11th, 2017 12:00
This one's easy. Any windows server always has these default administratively hidden shares too c$ d$, etc. So does VNX. By default the only users that will ever have access to this share are those that are in the local administrators group of the NAS server (or windows server BTW) in question. If you try via a computer management MMC, you can't even change the access rights to the c$ share, you get a pop-up saying that:
"This has been shared for administrative purposes. The share permissions and file security cannot be set."
Which is fine, it's not a risk as long as you're careful about whom you let be a local admin. This is by default, only domain admins, and perhaps the user who actually joined the NAS server to Active Directory in the first place.
Hope this helps,
~Chris Klosterman
Principal SE, Datadobi
chris.klosterman@datadobi.com