Enabling ADMIN$ Share Access on Windows Virtual Guests

Enabling ADMIN$ Share Access on Windows 2000/2003 VMs

If the ADMIN$ share is not available on any Windows-based virtual guest, create the share using the procedure detailed below:

  1. Open the Windows Explorer on the virtual machine, browse for the corresponding Windows directory in the C drive, right-click on it, and select the Sharing option from the shortcut menu.
  2. If the admin$ share does not pre-exist on the Windows guest, then Figure 1 appears indicating the same.

    1

    Figure 1 : The ADMIN$ share does not exist

  3. On the other hand, if the admin$ share pre-exists, Figure 2 appears. In such a case, first, remove the admin$ share by selecting the Do not share this folder option from Figure 2 and clicking the Apply and ok buttons. After this, you will have to repeat step 1 of this procedure to open Figure 1. Then, proceed as indicated by step 3 onwards.

    9

    Figure 2 : Admin$ share pre-exists

  4. To create (or re-create) the admin$ share, select the Share this folder option from Figure 2, and provide admin$ share against the Share name text box (see Figure 3).

    2

    Figure 3 : Creating the ADMIN$ share

  5. Next, to enable the eG agent to communicate effectively with the Windows guest, you need to ensure that the permission to access the admin$ share is granted to an administrative user (local/domain); also, the credentials of this user should be passed while configuring the eG monitoring capabilities - i.e., while configuring the Oracle VM server tests. To grant the access permissions, click on the Permissions button in Figure 3.
  6. By default, the admin$ share can be accessed by Everyone (see Figure 4). To grant access rights to a specific administrative (local/domain) user, select the Add button in Figure 4. When Figure 5 appears, select the domain to search from the Look in list. The valid user accounts configured on the chosen domain then appear in the box below. From this box, choose the administrator's account and click on the Add button to add the chosen user account to the box below the Add button.

    3

    Figure 4 : Clicking the Add button

    4a

    Figure 5 : Selecting the administrative user to whom access rights are to be granted

  7. Finally, click the ok button. You will then switch to Figure 6, where the newly added administrator account will appear.

    5a

    Figure 6 : The administrator account granted access permissions

  8. Select the newly added administrator account from Figure 6, and then, using the Permissions section, grant the administrator Full Control, Change, and Read permissions.
  9. Finally, click the Apply and ok buttons in Figure 6 to register the changes.
  10. Once you return to Figure 3, click on the Security tab to define the security settings for the admin$ share (see Figure 7).

    6a

    Figure 7 : Defining the Security settings for the ADMIN$ share

  11. Here again, you need to add the same administrator account, which was granted access permissions earlier. To do so, click the Add button in Figure 7, pick a domain from the Look in list of Figure 5, select the said administrator account from the domain users list below, and click the Add button (in Figure 5) to add the chosen account. Then, click the ok button in Figure 8.

    7a

    Figure 8 : Adding the administrator account

  12. This will bring you back to Figure 7, but this time, the newly added domain administrator account will be listed therein as indicated by Figure 9.

    8

    Figure 9 : The Administrator account in the Security list

  13. Finally, click the Apply and ok buttons in Figure 9.

Enabling ADMIN$ Share Access on Windows 2008 VMs

To enable the admin$ share on a Windows 2008 VM, do the following:

  1. Open the Windows Explorer on the virtual machine, browse for the corresponding Windows directory in the C drive, right-click on it, and select the Share option from the shortcut menu.

    1

    Figure 10 : Selecting the Share option from the shortcut menu

  2. Figure 11 will then appear. Click on Advanced Sharing in Figure 11.

    2

    Figure 11 : Clicking on Advanced Sharing

  3. Select the Share this folder check box in Figure 12 that appears, enter admin$ against Share name, and click on the Permissions button in Figure 12, to allow only a local/domain administrator to access the folder.

    3

    Figure 12 : Enabling the ADMIN$ share

  4. When Figure 13 appears, click on the Add button therein.

    4

    Figure 13 : Clicking on the Add button

  5. To allow a domain administrator to access the folder, first, ensure that a valid domain is specified in the From this location box of Figure 14. If you want to grant access to a local administrator instead, ensure that the name of the local host is displayed in the From this location box. To change this specification, use the Locations button in Figure 14. Then, enter the name of the local/domain administrator in the Enter the object names to select text area, and click the ok button. 

    5

    Figure 14 : Allowing a domain administrator to access the folder

  6. The newly added user will be listed in the Group or user names section, as depicted by Figure 15. Select this user, and then, check all the three check boxes under Allow in the Permissions for <user> section in Figure 15. Then, click the Apply and ok buttons therein.

    6

    Figure 15 : Allowing full access to the local/domain administrator

  7. When Figure 16 appears, click on the Apply and ok buttons therein to register the changes.

    7

    Figure 16 : Applying the changes

  8. Alternatively, by adding a new entry in the Windows registry, you can quickly enable the admin$ share. The steps for the same are discussed hereunder:

    1. In Run prompt type regedit to open registry editor.

    2. Browse through the following sub key:

      HKEY_LOCAL_MACHInE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System

    3. Create a new entry with the below information;

      • Key Name : LocalAccountTokenFilterPolicy
      • Key Type : DWORD (32-bit)
      • Key Value : 1
    4. Exit registry editor.

    Note:

    As with any change to the registry, ensure that the above-mentioned change is also performed with utmost care, so as to avoid problems in the functioning of the operating system.