Hi There. I have been requested to look into removing administrator access to the default drive shares on our workstations. As far as we know we do not need them for internal use (no SMS etc...) The main concern is with the C$ share not so much the ADMIN$ one. Has anyone managed to do this? I am hoping to allow users to be admins of their machines but not allow them to be admins on "all" machines. Thanks!