Hi All, I have a small query.In my environment we have more than 30,000 clients.I need to know what are the machines is having admin rights (C$ and admin$). is there any WQl query.can any one help me on this.. just let me check will share you with the result. Stephene

Hi, until you dont have any GPO or port/firewall(File and Print Sharing needed) to disable admin$ share,it will be accessble . It would be difficlt to check on all machines if admin$ share is enabled but there are tools to check if admin$ enabled but that is tedious job really.. if you are looking for SCCM report(SQL) or collection(WQL) ,you will have to edit SMS_DEF.MOF file and change shares name to get these detials. [ SMS_Report (FALSE), SMS_Group_Name ("Shares"), SMS_Class_ID ("MICROSOFT|SHARE|1.0") Please click on "vote as Helpful" if you feel this post helpful to you. Eswar Koneti | My Tech blog: www.eskonr.com | Linkedin: Eswar Koneti

This is a perfect and simple task for DCM as it's completely dictated by a single registry value: http://www.petri.co.il/disable_administrative_shares.htmJason | http://blog.configmgrftw.com | Twitter @JasonSandys