Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I'm trying to use ADMT to migrate several XP machines to a new domain and the utility (nor command line) is able to access the admin$ share or any drive share.

I've added the required registry key (HKCurrent\Services\LanMan\Param) for both servers and workstation admin sharing, rebooted the PC and still am unable to access it.

How can I access the admin share on these PCs?

If it helps, this machine used to have McAfee installed, and the Windows firewall enabled. I stoppped both of them and the machine is still not allowing me to access it remotely by a drive$ share.

share|improve this question

2 Answers 2

up vote 2 down vote accepted

First, as silly as it might sound, consider running an offline virus scan using a boot CD such as Kaspersky's rescue CD. Any time administrative shares go missing, especially when the proper registry keys exist, my radar is immediately tweaked for some kind of malicious software. It can't hurt to pop a CD in and let it sit, crunching away for a few minutes or hours.

Second, go into your adapter's properties and make sure that "File and Printer Sharing for Microsoft Networks" is enabled.

Third, let the flailing begin! You can reset your TCP/IP stack which sometimes clears up weirdness like this. As administrator, run netsh int ip reset resetlog.txt to reset the TCP/IP stack. Next reset winsock2 with netsh int reset or just reset the catalog with netsh winsock reset catalog. I will leave a thorough investigation of what those things to as an exercise for the reader.

Fourth, if you don't have the time to spend tracking down the root cause, consider an XP repair install. Note that you will need to reapply updates after the repair install. Existing files are kept in tact, however a backup before this is performed can't hurt.

share|improve this answer
    
File and Printer Sharing for Microsoft Networks was disabled!!! Who the heck would disable that!? –  makerofthings7 Apr 26 '12 at 14:17
    
@makerofthings7 You know who would do that? I know who would do that. Bad people would do that. Or, maybe 1) Those who have a fanatical desire for security and think "Disable ALL the things!", or 2) Someone who disables things they don't understand. –  Wesley Apr 26 '12 at 19:39
    
Meh, it was probably a bad person. =) –  Wesley Apr 26 '12 at 19:40
  1. Add the registry key to the HKEY_LOCAL_MACHINE (HKLM) hive instead of HKEY_CURRENT_USER.
  2. Make sure the Server service is started. Try to restart it if it is already running.
  3. To make sure Windows Firewall is not blocking anything, enable logging of dropped packets and try to access the shares again. Examine the firewall log to see if anything gets dropped.
    (Run -> firewall.cpl -> Advanced -> Security Logging -> Settings -> Log dropped packets)

If the ADMIN$ share exists but is still unavailable, try removing it and reboot (this should recreate it).

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.