Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm wondering if placing a user in the Power Users groups restricts that user's ability to remotely mount either admin$ or c$. My limited testing tells me that they can, but I'm curious to hear other thoughts from more experienced MS admins.

So far, Microsoft's docs on this are not useful, if you can point me to a doc with a definitive answer, that would be great too.

share|improve this question
up vote 5 down vote accepted

The administrative shares are only accessible to members of the local "Administrators" or "Backup Opeartors" (with "Server Operators" also having access on Windows Server OSs) on a groups on a given computer. If a user is a member of "Power Users" but not "Administrators" or "Backup Operators" (or "Server Operators") they will not be able to access the administrative shares.

Here's a doc from Microsoft re: these shares:

share|improve this answer
Thanks for the clarification Evan. – dr.pooter Jun 24 '09 at 16:53
Thanks again - my searches were focused on terms like 'permission' and 'privilege'. This is a great resource. – dr.pooter Jun 24 '09 at 16:59

Here's an excellent article on why not to use the Power Users group:; if Power Users can view the admin shares, that's proably symptomatic of a larger issue.

In Windows Vista and above, the Power Users group has the same rights as Users.

share|improve this answer
Thanks for the link. Good reading. – dr.pooter Jun 24 '09 at 17:01

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.