Changing the default ADMIN$ directory

Comments

8 comments

  • Adam Ruth

    Not currently, no. It's on our roadmap to make this configurable, though.

    Do you have a policy to disable ADMIN$ shares?

    0
    Comment actions Permalink
  • Matt Taylor

    I was wondering this same thing because it seems that for PDQ Deploy to work, I would have to go in and add 'LocalAccountTokenFilterPolicy' to the registry to allow for the Admin$ to be accessible. We have File Sharing & Printing enabled on all machines.

    0
    Comment actions Permalink
  • Adam Ruth

    Unfortunately a different share wouldn't remove the need for LocalAccountTokenFilterPolicy as it's also needed to access the Service Manager.

    0
    Comment actions Permalink
  • Matt Taylor

    Ok. That makes sense. Can you give me any hints on how to add that registry file to all of our machines so I can use PDQ Deploy properly? (other than installing it manually on each machine of course)

    0
    Comment actions Permalink
  • Adam Ruth

    The simplest way to do it is with a GPO.

    Computer Policy\Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options

    Other than that I don't think that you can set en masse because to set it remotely requires that it first be set.

    0
    Comment actions Permalink
  • Scott McGhee

    Adam,

    Any idea when on the roadmap when it become configurable?  Anti-virus is stopping me from creating something in that directory.

    I would make the exception to the anti-virus but due to how are organization is structured, that isn't an option.

    0
    Comment actions Permalink
  • Adam Ruth

    We're planning on doing this for the next version version (version 2.2).  We want to consolidate the PDQ Deploy and PDQ Inventory directories in one place to make them easier to configure together.  What directory/share would you plan on changing it to?

    0
    Comment actions Permalink
  • Scott McGhee

    Probably the C:\Temp going through a root C$ share.

    0
    Comment actions Permalink

Please sign in to leave a comment.