Step-by-Step Guide to Disable Admin Shares in Windows 11

Disabling administrative shares in Windows 11 can enhance security by blocking unauthorized remote access. However, this action is generally not advised, as numerous tools rely on admin shares to deploy software on endpoints. For instance, System Center Configuration Manager (SCCM) may face operational issues, among other potential complications.

How do I disable admin shares in Windows 11?

1. Use the Registry Editor to modify the AutoShareWks value

1. Press Win + R to open the Run dialog, type regedit, and then press Enter to launch the Registry Editor.
2. If a User Account Control (UAC) prompt appears, click Yes to proceed.
3. In the Registry Editor, navigate to: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters
4. Locate the AutoShareWks value in the right pane.
5. If it’s missing, create it by right-clicking on the empty area, selecting New > DWORD (32-bit) Value, and entering AutoShareWks as the name.
6. Double-click on AutoShareWks, set its value to 0, and click OK to confirm the changes.
7. Exit the Registry Editor and restart your computer to implement the adjustments.

2. Disable admin shares on Windows Server

For Windows Server systems, the procedure is analogous but requires a different registry value:

1. Press Win + R, type regedit, and press Enter.
2. Accept any UAC prompts to allow changes.
3. Navigate to the LanmanServer Parameters key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters
4. Search for AutoShareServer in the right pane.
5. If it’s not present, right-click in the empty space, select New > DWORD (32-bit) Value, and name it AutoShareServer.
6. Double-click on AutoShareServer, set the value to 0, then click OK to save changes.
7. Close the Registry Editor and restart the server for the modifications to take effect.

To confirm the changes, access Computer Management, then navigate to System Tools > Shared Folders > Shares. Ensure that administrative shares (like C$, ADMIN$) are no longer visible.

As outlined, disabling admin shares in Windows 11 and Windows Server is straightforward, but again, it is not a generally recommended practice.

Source