Q: Can we disable the default Windows administrative shares (C$, D$, Admin$, IPC$) to lock down some of our Windows servers?

A:You can remove the administrative shares on a Windows box and prevent them from being created automatically by editing the following registry key andsetting its value to 0: HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesLanmanServerParametersAutoShareServer. To apply this change, you muststop and restart the server service, which you can easily do by entering the following commands at the command prompt:

net stop servernet start server

However, Microsoft recommends that you don't remove administrative shares because it can break many different things. For a list of problems that canoccur, have a look at the Microsoft article "Overview of problems that may occur when administrative shares are missing."