Enabling ADMIN$ Share Access on Windows Virtual Guests

Enabling ADMIN$ Share Access on Windows 2000/2003 VMs

If the ADMIN$ share is not available on any Windows-based virtual guest, create the share using the procedure detailed below:

  1. Open the Windows Explorer on the virtual machine, browse for the corresponding Windows directory in the C drive, right-click on it, and select the Sharing option from the shortcut menu.

  2. If the admin$ share does not pre-exist on the Windows guest, then Figure 130 appears indicating the same.

    Figure 130 : The ADMIN$ share does not exist

  3. On the other hand, if the admin$ share pre-exists, Figure 131 appears. In such a case, first, remove the admin$ share by selecting the Do not share this folder option from Figure 131 and clicking the Apply and ok buttons. After this, you will have to repeat step 1 of this procedure to open Figure 130. Then, proceed as indicated by step 3 onwards.

    Figure 131 : Admin$ share pre-exists

  4. To create (or re-create) the admin$ share, select the Share this folder option from Figure 132, and provide admin$ share against the Share name text box (see Figure 132).

    Figure 132 : Creating the ADMIN$ share

  5. Next, to enable the eG agent to communicate effectively with the Windows guest, you need to ensure that the permission to access the admin$ share is granted to an administrative user (local/domain); also, the credentials of this user should be passed while configuring the eG monitoring capabilities - i.e., while configuring the VMware tests. To grant the access permissions, click on the Permissions button in Figure 132.

  6. By default, the admin$ share can be accessed by Everyone (see Figure 133). To grant access rights to a specific administrative (local/domain) user, select the Add button in Figure 133. When Figure 134 appears, select the domain to search from the Look in list. The valid user accounts configured on the chosen domain then appear in the box below. From this box, choose the administrator’s account and click on the Add button to add the chosen user account to the box below the Add button.

    Figure 133 : Clicking the Add button

    Figure 134 : Selecting the administrative user to whom access rights are to be granted

  7. Finally, click the ok button. You will then switch to Figure 135, where the newly added administrator account will appear.

    Figure 135 : The administrator account granted access permissions

  8. Select the newly added administrator account from Figure 135, and then, using the Permissions section, grant the administrator Full Control, Change, and Read permissions.

  9. Finally, click the Apply and ok buttons in Figure 135 to register the changes.

  10. Once you return to Figure 132, click on the Security tab to define the security settings for the admin$ share (see Figure 136).

    Figure 136 : Defining the Security settings for the ADMIN$ share

  11. Here again, you need to add the same administrator account, which was granted access permissions earlier. To do so, click the Add button in Figure 136, pick a domain from the Look in list of Figure 137, select the said administrator account from the domain users list below, and click the Add button (in Figure 137) to add the chosen account. Then, click the ok button in Figure 137.

    Figure 137 : Adding the administrator account

  12. This will bring you back to Figure 136, but this time, the newly added domain administrator account will be listed therein as indicated by Figure 138.

    Figure 138 : The Administrator account in the Security list

  13. Finally, click the Apply and ok buttons in Figure 138.

Enabling ADMIN$ Share Access on Windows 2008 VMs

To enable the admin$ share on a Windows 2008 VM, do the following:

  1. Open the Windows Explorer on the virtual machine, browse for the corresponding Windows directory in the C drive, right-click on it, and select the Share option from the shortcut menu.

    Figure 139 : Selecting the Share option from the shortcut menu

  2. Figure 140 will then appear. Click on Advanced Sharing in Figure 140.

    Figure 140 : Clicking on Advanced Sharing

  3. Select the Share this folder check box in Figure 141 that appears, enter admin$ against Share name, and click on the Permissions button in Figure 141, to allow only a local/domain administrator to access the folder.

    Figure 141 : Enabling the ADMIN$ share

  4. When Figure 142 appears, click on the Add button therein.

    Figure 142 : Clicking on the Add button

  5. To allow a domain administrator to access the folder, first, ensure that a valid domain is specified in the From this location box of Figure 143. If you want to grant access to a local administrator instead, ensure that the name of the local host is displayed in the From this location box. To change this specification, use the Locations button in Figure 143. Then, enter the name of the local/domain administrator in the Enter the object names to select text area, and click the ok button. 

    Figure 143 : Allowing a domain administrator to access the folder

  6. The newly added user will be listed in the Group or user names section, as depicted by Figure 144. Select this user, and then, check all the three check boxes under Allow in the Permissions for <user> section in Figure 144. Then, click the Apply and ok buttons therein.

    Figure 144 : Allowing full access to the local/domain administrator

  7. When Figure 145 appears, click on the Apply and ok buttons therein to register the changes.

    Figure 145 : Applying the changes

Alternatively, by adding a new entry in the Windows registry, you can quickly enable the admin$ share. The steps for the same are discussed hereunder:

  1. In Run prompt type regedit to open registry editor.

  2. Browse through the following sub key:

    HKEY_LOCAL_MACHInE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

  3. Create a new entry with the below information

    • Key Name : LocalAccountTokenFilterPolicy

    • Key Type : DWORD (32-bit)

    • Key Value : 1

  4. Exit registry editor.

Note:

As with any change to the registry, ensure that the above-mentioned change is also performed with utmost care, so as to avoid problems in the functioning of the operating system.