Hidden Shares - NOT Hidden.

[Marian Henna]

I just noticed this little detail.



I fired up my laptop using a wireless connection to my Office LAN in our

computer room. I have many hidden shares on four servers (with a $ of

course). Two servers are Win2K3 and 2 are Win2K.



When I fired up the network browser (my network places), I noticed that ALL

the hidden shares were visible when I clicked on Entire Network. Also, in

the right pane (window) it showed "Internet Connection" in the title bar.



I don't ever recall seeing this - "Ever". I'm suspecting that it is because

of the wireless connection - but I'm guessing here.



The laptop is a fully patched WinXP SP3 machine.



Out of curiosity, I fired up a laptop with Vista (yeah sorry...) using a

wireless connection, and I got the same thing. When on a wired connection,

this does not happen.



Has anyone seen this before? How can I prevent this from happening?



To be honest, we are quite concerned about this because we of course don't

want these shares to be seen/available to anyone outside our LAN.



btw: this occurs when the laptops are in the same "Workgroup" name - doesn't

occur when they are Domain Members.



Thanks.

 

[Bernd]

-------- Original-Nachricht --------



> I just noticed this little detail.

>

> I fired up my laptop using a wireless connection to my Office LAN in our

> computer room. I have many hidden shares on four servers (with a $ of

> course). Two servers are Win2K3 and 2 are Win2K.

>

> When I fired up the network browser (my network places), I noticed that ALL

> the hidden shares were visible when I clicked on Entire Network. Also, in

> the right pane (window) it showed "Internet Connection" in the title bar.

>

> I don't ever recall seeing this - "Ever". I'm suspecting that it is because

> of the wireless connection - but I'm guessing here.

>

> The laptop is a fully patched WinXP SP3 machine.

>

> Out of curiosity, I fired up a laptop with Vista (yeah sorry...) using a

> wireless connection, and I got the same thing. When on a wired connection,

> this does not happen.

>

> Has anyone seen this before? How can I prevent this from happening?

>

> To be honest, we are quite concerned about this because we of course don't

> want these shares to be seen/available to anyone outside our LAN.

>

> btw: this occurs when the laptops are in the same "Workgroup" name - doesn't

> occur when they are Domain Members.

>

> Thanks.

>

>



I think it will happen when you are logged on as administrator AND the

same userid with the same password exists on the shared computer.



Bernd

 

[Marian Henna]

Thanks Brend. I tested your though by logging on with a different account

and yes, you seem to be correct. With a different account, the share does

not appear - even if the other user is a member of the local admin group.



Thanks.



"Bernd" wrote in message

news:u38FNyO0KHA.348@TK2MSFTNGP02.phx.gbl...

>

>

> -------- Original-Nachricht --------

>

>> I just noticed this little detail.

>>

>> I fired up my laptop using a wireless connection to my Office LAN in our

>> computer room. I have many hidden shares on four servers (with a $ of

>> course). Two servers are Win2K3 and 2 are Win2K.

>>

>> When I fired up the network browser (my network places), I noticed that

>> ALL the hidden shares were visible when I clicked on Entire Network.

>> Also, in the right pane (window) it showed "Internet Connection" in the

>> title bar.

>>

>> I don't ever recall seeing this - "Ever". I'm suspecting that it is

>> because of the wireless connection - but I'm guessing here.

>>

>> The laptop is a fully patched WinXP SP3 machine.

>>

>> Out of curiosity, I fired up a laptop with Vista (yeah sorry...) using a

>> wireless connection, and I got the same thing. When on a wired

>> connection, this does not happen.

>>

>> Has anyone seen this before? How can I prevent this from happening?

>>

>> To be honest, we are quite concerned about this because we of course

>> don't want these shares to be seen/available to anyone outside our LAN.

>>

>> btw: this occurs when the laptops are in the same "Workgroup" name -

>> doesn't occur when they are Domain Members.

>>

>> Thanks.

>

> I think it will happen when you are logged on as administrator AND the

> same userid with the same password exists on the shared computer.

>

> Bernd

 

[Bernd]

-------- Original-Nachricht --------



> Thanks Brend. I tested your though by logging on with a different account

> and yes, you seem to be correct. With a different account, the share does

> not appear - even if the other user is a member of the local admin group.

>

> Thanks.

>



Thats the way it works, for remote administration (in contrast to Simple

Filesharing using the Guest account).

It's a feature, not a bug ;-)



I learned it by trying to get running Psexec from Sysinternals.



Bernd