Ref: 08260002
Title: Sharenames to Access Root Directory on 3+Open Server Drives
Date: 2/6/90

Copyright 3Com Corporation, 1991.  All rights reserved.

When a LanMan server is booted, certain sharenames appear that were
automatically shared by the LAN Manager.  They are of the form C$, D$,
etc.  The remark for them is "Default share for internal use" and their
path is always to the root of the drive letter in the sharename.

These sharenames allow administrators to access the root directory of
the server's logical disk drives.  For example, C$ is the name for
administrator's access to the root of drive C:, D$ is the name for
administrator's access to the root of drive D:, and so on for all other
logical drives on the server.

When linked, the network user has complete access to the entire logical
drive, including making and removing directories on the root.  To
protect this capability from unauthorized use, users must have Admin
privilege on the server to NET USE to a root sharename.  Also, a password
can be assigned to the sharenames so that only Admin-level users who
know the password can gain access to the root drives.

On a server with User Level security, a user is assigned Admin privilege
that applies to that server only.  That is, Admin A on Machine A cannot
NET USE x: \\SERVER\C$ on Machine B, unless the user also has Admin
privilege on Machine B.  After logging on, an admin can NET USE directly
to the server's root drive with full access.

On a server with Share Level security, the sharename ADMIN$ must first be
shared and assigned a password.  The password can be different for each
server so that Admin capability is restricted to only those servers for
which the password is known.  Users who NET USE \\SERVER\ADMIN$ successfully
will be able to add drives on that server.

To give Admin access to individual drives, explicitly share each drive
with a unique password:

    NET SHARE C$=C:\ PASSWD_C
    NET SHARE D$=D:\ PASSWD_D


To completely disable server root access for all network users, unshare
the resource.  Use NET ADMIN to delete the shared resource and SAVE the
profile in SRVSHARE.PRO, or manually edit SRVSHARE.PRO to NET SHARE x$
/DELETE for the desired drive.

