How to Disable Admin Shares in Windows 11

You can easily disable admin shares using Registry Editor

Reading time icon 2 min. read


Readers help support Windows Report. We may get a commission if you buy through our links. Tooltip Icon

Read our disclosure page to find out how can you help Windows Report sustain the editorial team Read more

How to disable admin shares in Windows 11

Disabling administrative shares in Windows 11 can help improve security by preventing unauthorized remote access. However, it’s not a recommended procedure since many tools use the admin shares to push software on the endpoints. The SCCM won’t work as intended and you might need to fix other unforeseen problems.

How do I disable admin shares in Windows 11?

1. Use the Registry editor to modify the AutoShareWks value

Note icon NOTE
Use File > Export in Registry Editor to save a copy of your Registry before the changes, to make sure you can restore it if anything goes wrong.
  1. Pressย Win + Rย to open the Run dialog, typeย regeditย and press Enter to open the Registry Editor.
  2. If prompted by User Account Control (UAC), click Yes to allow changes.
  3. In the Registry Editor, navigate to the following path: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters
  4. Look for a value namedย AutoShareWksย in the right pane.
  5. If it doesnโ€™t exist, create it by right-clicking on the empty space in the right pane, selecting New > DWORD (32-bit) Value, and naming itย AutoShareWks.
  6. Double-click onย AutoShareWksย and set its value toย 0, then click OK to save the changes.
  7. Close the Registry Editor and restart your computer to apply the changes.

2. Disable admin shares on Windows Server

If you are working on a Windows Server, the process is similar but with a different registry value:

  1. Pressย Win + R, typeย regedit, and press Enter.
  2. Allow changes if prompted by UAC.
  3. Navigate to the LanmanServer Parameters key: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters
  4. Look forย AutoShareServerย in the right pane.
  5. If it doesnโ€™t exist, create it by right-clicking on the empty space, selecting New > DWORD (32-bit) Value, and naming itย AutoShareServer.
  6. Double-click onย AutoShareServerย and set its value toย 0, then click OK to save the changes.
  7. Close the Registry Editor and restart the server to apply the changes.

To check if you made the changes correctly, open Computer Management, then go to System Tools > Shared Folders > Shares. Verify that the administrative shares (e.g.,ย C$,ย ADMIN$) are no longer listed.

As you can see, disabling admin shares in Windows 11 and Windows Server is pretty easy, but once again, it’s not a recommended procedure.

More about the topics: administrator account, file sharing

User forum

0 messages