GPO Set Permissions on Admin Shares

[mackdaddy315]

Is there a way to set permissions on Admin Shares through a GPO?

I've taken control of a large network where domain users have been
added to the local users group which has been given access to the C$
admin share. So any user can unc to anyones C$ and have almost complete
control.

I want to change permissions (if possible) so user wont have admin
share access but domain admins will.

[Roger Abell [MVP]]

Are you sure ??
The permissions for the admin shares is fixed.
It is possible that they disabled admin shares and then created
shares by the same name. Perhaps they know of a reg hack
in the lanmanserver shares keys to allow a grant to users (?)
Anyway, not knowing how what you report was brought about
all I can say is there is no pre-defined policy to affect admin
share permissions, but if you knew how it could likely be done
in some way with GPO.

Post by mackdaddy315
Is there a way to set permissions on Admin Shares through a GPO?
I've taken control of a large network where domain users have been
added to the local users group which has been given access to the C$
admin share. So any user can unc to anyones C$ and have almost complete
control.
I want to change permissions (if possible) so user wont have admin
share access but domain admins will.