Přidat otázku mezi oblíbenéZasílat nové odpovědi e-mailem remote zapnutie admin share

Dobrý deň,

potreboval by som poradiť či by sa dalo spraviť takéto niečo:

chcem zapnúť na PC v LAN admin share. Vytvorim si reg. subor share.reg:

Hive: HKEY_LOCAL_MACHINE
Key: SYSTEM\CurrentControlSet\Services\LanManServer\Parameters
Name: AutoShareWks
Data Type: REG_DWORD
Value: 1

ktorý mi po spustení zapne admin share. Len neviem ci je to tak isto na viste aj na xp.
Potom cez pstools konkr. cez psexec pospustam na kompoch v sieti regedit.exe share.reg cez admin login a malo by byť pri restarte funkčne admin share?
Pojde to na XP aj vo VISTE? Popr. existuje neaky jednoduchši spôsom ako remote zapnuť amin share?

Dakujem

loading...
Předmět Autor Datum
Ano existuje jednodušší způsob (zkopírováno z Expert Exchange) On the Domain Controller open and ed…
Vladimir 22.12.2008 14:14
Vladimir
mno problem je v tom, že vo firme nemáme doménu. A toto vyzerá ako návod pre doménu.
eth4rendil 22.12.2008 14:20
eth4rendil
Uf, tak bez domény je to porod. Každému pc tedy do registru [HKEY_LOCAL_MACHINE\SYSTEM\CurrentContr…
Vladimir 22.12.2008 14:33
Vladimir
az taky porod to nie je :) ten program psexec dokaze spustit na PC v lanke program aj pod inym usero…
eth4rendil 22.12.2008 14:41
eth4rendil
Na co to vlastne delas? Defaultne to admin. share zaple je...tedy pokud to nikdo nevypnul.
Abox 23.12.2008 00:11
Abox
no keby som to bolo zapnute tak to neriesim :)a na viste je to defaultne vypnute
eth4rendil 23.12.2008 08:05
eth4rendil
Jsem blbej, sem si nevsiml, ze je to Vista... :-[ poslední
Abox 23.12.2008 13:26
Abox

Ano existuje jednodušší způsob (zkopírováno z Expert Exchange)

On the Domain Controller open and edit with notepad

%SystemRoot%\inf\sceregvl.inf

Add the following value to this section

[Register Registry Values]
MACHINE\System\CurrentControlSet\Services\ LanManServer\Parameters\AutoShareServer,4,%AutoShar eServer%,0

and

[Strings]
AutoShareServer = Prevent Administrative Shares from being created

After you have modified the Sceregvl.inf file to include your custom registry settings, the changes need to be registered by running the following command:

C:\>regsvr32 scecli.dll

to register the new policy.

Now open the Group Policy Editor for the policy you want to add the setting to.

Start Menu>Settings>Control Panel>Administrative Tools>Active Directory Users and Computers MMC,

Right-click the domain and choose Properties,

Choose the Group Policy tab,

Select the policy you want to work with,

Press the Edit button,

Group Policy Editor opens.

Expand the tree

Computer Configuration>Windows Settings>Security Settings>Local Policies>Security Options

In the policy list in the right pane look for "Prevent Administrative Shares from being created"

(this is the setting we created in sceregvl.inf)

Double-click to bring up its properties,

Tick "Define this policy setting"

Select "Enabled"

Press OK

Close Group Policy Editor.

To force the policy out immediately from the Domain Controller

C:\>secedit /refreshpolicy machine_policy /enforce

On an XP workstation

C:\>gpudate

Check your client's registry at

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Se rvices\LanManServer\Parameters\autoshareserver

az taky porod to nie je :) ten program psexec dokaze spustit na PC v lanke program aj pod inym userom. Na kazdom pc v lan mame nastaveneho usera admina s tym istym heslom. Dokaze jednym prikazom spustit procej na viacerych pc. Teda pc iba vypisem do prikazovej riadky zadam paramertre dam na kompoch spustit c:\windows\regedit.exe "cesta k tomuto reg suboru" a hotovo.

Túto vetvu regeistru mam napisanu aj ja hore, len som nevedel či je to v xp aj vo viste tak isto, teda či to môžem použiť na viste aj na xp..

Zpět do poradny Odpovědět na původní otázku Nahoru

loading...