Drives shared on network without action
.everyoneloves__top-leaderboard:empty,.everyoneloves__mid-leaderboard:empty,.everyoneloves__bot-mid-leaderboard:empty{ height:90px;width:728px;box-sizing:border-box;
}
I've started a new job and was given a workstation.
The computer runs Windows 10 Pro but it is not part of a domain and is configured with a personal account (noone but me knows the username/password).
I've noticed that everytime i come in to work my drives (SSD + HDD) are shared on the network and accessible by everyone.
I doubt that anyone has been accessing my computer when i'm not at work (enabled audit logging), and i doubt they have installed any kind of keylogging software/RAT.
What do you think could be the cause of this issue?
Drive D Icon
Properties->Sharing
Sharing Settings
Edit: The Pc is a Dell Inspiron 5680 that came with Windows 10 Pro.
I'm starting to doubt it could be some weird Local Policy set up by dell?
windows networking windows-10 smb
asked Mar 5 at 7:39
FonzusysFonzusys
1014
|
show 2 more comments
I've started a new job and was given a workstation.
The computer runs Windows 10 Pro but it is not part of a domain and is configured with a personal account (noone but me knows the username/password).
I've noticed that everytime i come in to work my drives (SSD + HDD) are shared on the network and accessible by everyone.
I doubt that anyone has been accessing my computer when i'm not at work (enabled audit logging), and i doubt they have installed any kind of keylogging software/RAT.
What do you think could be the cause of this issue?
Drive D Icon
Properties->Sharing
Sharing Settings
Edit: The Pc is a Dell Inspiron 5680 that came with Windows 10 Pro.
I'm starting to doubt it could be some weird Local Policy set up by dell?
windows networking windows-10 smb
asked Mar 5 at 7:39
FonzusysFonzusys
1014
Are they shared via "folder sharing"? How did you find out that they're accessible by everyone?
– grawity
Mar 5 at 9:31
Edited with images
– Fonzusys
Mar 5 at 10:33
2
Ah, so it's a custom share – not the built-in administratived$share? Have you tried asking your local IT team if they've done this? Have you tried enabling audit logging for the registry changes to LanmanServer? (Note that 'Everyone' in this specific field doesn't automatically grant access, clients must still have an account and must be allowed by file/folder permissions.)
– grawity
Mar 5 at 10:49
Enabled audit logging. Also running an offline scan of both drives for additional security.
– Fonzusys
Mar 6 at 7:09
@grawity A short while after a reboot, i found the drives shared once again. Yet the logs are empty. Could this be a side effect of running Docker or Hyper-V? Also, when i disable sharing an alert pops up that x users are connected to the drive.
– Fonzusys
Mar 6 at 9:09
|
show 2 more comments
I've started a new job and was given a workstation.
The computer runs Windows 10 Pro but it is not part of a domain and is configured with a personal account (noone but me knows the username/password).
I've noticed that everytime i come in to work my drives (SSD + HDD) are shared on the network and accessible by everyone.
I doubt that anyone has been accessing my computer when i'm not at work (enabled audit logging), and i doubt they have installed any kind of keylogging software/RAT.
What do you think could be the cause of this issue?
Drive D Icon
Properties->Sharing
Sharing Settings
Edit: The Pc is a Dell Inspiron 5680 that came with Windows 10 Pro.
I'm starting to doubt it could be some weird Local Policy set up by dell?
windows networking windows-10 smb
asked Mar 5 at 7:39
FonzusysFonzusys
1014
I've started a new job and was given a workstation.
The computer runs Windows 10 Pro but it is not part of a domain and is configured with a personal account (noone but me knows the username/password).
I've noticed that everytime i come in to work my drives (SSD + HDD) are shared on the network and accessible by everyone.
I doubt that anyone has been accessing my computer when i'm not at work (enabled audit logging), and i doubt they have installed any kind of keylogging software/RAT.
What do you think could be the cause of this issue?
Drive D Icon
Properties->Sharing
Sharing Settings
Edit: The Pc is a Dell Inspiron 5680 that came with Windows 10 Pro.
I'm starting to doubt it could be some weird Local Policy set up by dell?
windows networking windows-10 smb
windows networking windows-10 smb
asked Mar 5 at 7:39
FonzusysFonzusys
1014
asked Mar 5 at 7:39
FonzusysFonzusys
1014
edited Mar 5 at 10:41
Fonzusys
asked Mar 5 at 7:39
FonzusysFonzusys
1014
asked Mar 5 at 7:39
FonzusysFonzusys
1014
asked Mar 5 at 7:39
FonzusysFonzusys
1014
1014
Are they shared via "folder sharing"? How did you find out that they're accessible by everyone?
– grawity
Mar 5 at 9:31
Edited with images
– Fonzusys
Mar 5 at 10:33
2
Ah, so it's a custom share – not the built-in administratived$share? Have you tried asking your local IT team if they've done this? Have you tried enabling audit logging for the registry changes to LanmanServer? (Note that 'Everyone' in this specific field doesn't automatically grant access, clients must still have an account and must be allowed by file/folder permissions.)
– grawity
Mar 5 at 10:49
Enabled audit logging. Also running an offline scan of both drives for additional security.
– Fonzusys
Mar 6 at 7:09
@grawity A short while after a reboot, i found the drives shared once again. Yet the logs are empty. Could this be a side effect of running Docker or Hyper-V? Also, when i disable sharing an alert pops up that x users are connected to the drive.
– Fonzusys
Mar 6 at 9:09
|
show 2 more comments
Are they shared via "folder sharing"? How did you find out that they're accessible by everyone?
– grawity
Mar 5 at 9:31
Edited with images
– Fonzusys
Mar 5 at 10:33
2
Ah, so it's a custom share – not the built-in administratived$share? Have you tried asking your local IT team if they've done this? Have you tried enabling audit logging for the registry changes to LanmanServer? (Note that 'Everyone' in this specific field doesn't automatically grant access, clients must still have an account and must be allowed by file/folder permissions.)
– grawity
Mar 5 at 10:49
Enabled audit logging. Also running an offline scan of both drives for additional security.
– Fonzusys
Mar 6 at 7:09
@grawity A short while after a reboot, i found the drives shared once again. Yet the logs are empty. Could this be a side effect of running Docker or Hyper-V? Also, when i disable sharing an alert pops up that x users are connected to the drive.
– Fonzusys
Mar 6 at 9:09
Are they shared via "folder sharing"? How did you find out that they're accessible by everyone?
– grawity
Mar 5 at 9:31
Are they shared via "folder sharing"? How did you find out that they're accessible by everyone?
– grawity
Mar 5 at 9:31
Edited with images
– Fonzusys
Mar 5 at 10:33
Edited with images
– Fonzusys
Mar 5 at 10:33
2
2
Ah, so it's a custom share – not the built-in administrative
d$ share? Have you tried asking your local IT team if they've done this? Have you tried enabling audit logging for the registry changes to LanmanServer? (Note that 'Everyone' in this specific field doesn't automatically grant access, clients must still have an account and must be allowed by file/folder permissions.)– grawity
Mar 5 at 10:49
Ah, so it's a custom share – not the built-in administrative
d$ share? Have you tried asking your local IT team if they've done this? Have you tried enabling audit logging for the registry changes to LanmanServer? (Note that 'Everyone' in this specific field doesn't automatically grant access, clients must still have an account and must be allowed by file/folder permissions.)– grawity
Mar 5 at 10:49
Enabled audit logging. Also running an offline scan of both drives for additional security.
– Fonzusys
Mar 6 at 7:09
Enabled audit logging. Also running an offline scan of both drives for additional security.
– Fonzusys
Mar 6 at 7:09
@grawity A short while after a reboot, i found the drives shared once again. Yet the logs are empty. Could this be a side effect of running Docker or Hyper-V? Also, when i disable sharing an alert pops up that x users are connected to the drive.
– Fonzusys
Mar 6 at 9:09
@grawity A short while after a reboot, i found the drives shared once again. Yet the logs are empty. Could this be a side effect of running Docker or Hyper-V? Also, when i disable sharing an alert pops up that x users are connected to the drive.
– Fonzusys
Mar 6 at 9:09
|
show 2 more comments
0
active
oldest
votes
Your Answer
StackExchange.ready(function() {
var channelOptions = {
tags: "".split(" "),
id: "3"
};
initTagRenderer("".split(" "), "".split(" "), channelOptions);
StackExchange.using("externalEditor", function() {
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled) {
StackExchange.using("snippets", function() {
createEditor();
});
}
else {
createEditor();
}
});
function createEditor() {
StackExchange.prepareEditor({
heartbeatType: 'answer',
autoActivateHeartbeat: false,
convertImagesToLinks: true,
noModals: true,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
imageUploader: {
brandingHtml: "Powered by u003ca class="icon-imgur-white" href="https://imgur.com/"u003eu003c/au003e",
contentPolicyHtml: "User contributions licensed under u003ca href="https://creativecommons.org/licenses/by-sa/3.0/"u003ecc by-sa 3.0 with attribution requiredu003c/au003e u003ca href="https://stackoverflow.com/legal/content-policy"u003e(content policy)u003c/au003e",
allowUrls: true
},
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
});
}
});
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1411351%2fdrives-shared-on-network-without-action%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
0
active
oldest
votes
0
active
oldest
votes
active
oldest
votes
active
oldest
votes
Thanks for contributing an answer to Super User!
- Please be sure to answer the question. Provide details and share your research!
But avoid …
- Asking for help, clarification, or responding to other answers.
- Making statements based on opinion; back them up with references or personal experience.
To learn more, see our tips on writing great answers.
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
StackExchange.ready(
function () {
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2fsuperuser.com%2fquestions%2f1411351%2fdrives-shared-on-network-without-action%23new-answer', 'question_page');
}
);
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Sign up or log in
StackExchange.ready(function () {
StackExchange.helpers.onClickDraftSave('#login-link');
});
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Sign up using Google
Sign up using Facebook
Sign up using Email and Password
Post as a guest
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Required, but never shown
Are they shared via "folder sharing"? How did you find out that they're accessible by everyone?
– grawity
Mar 5 at 9:31
Edited with images
– Fonzusys
Mar 5 at 10:33
2
Ah, so it's a custom share – not the built-in administrative
d$share? Have you tried asking your local IT team if they've done this? Have you tried enabling audit logging for the registry changes to LanmanServer? (Note that 'Everyone' in this specific field doesn't automatically grant access, clients must still have an account and must be allowed by file/folder permissions.)– grawity
Mar 5 at 10:49
Enabled audit logging. Also running an offline scan of both drives for additional security.
– Fonzusys
Mar 6 at 7:09
@grawity A short while after a reboot, i found the drives shared once again. Yet the logs are empty. Could this be a side effect of running Docker or Hyper-V? Also, when i disable sharing an alert pops up that x users are connected to the drive.
– Fonzusys
Mar 6 at 9:09