Reconfiguring Mount Paths that Use Administrative Share

Administrative shares pose a security vulnerability and must be disabled on mount paths that use administrative shares. Typically, a dollar ($) is used to denote the shared partition or volume. For example: \\MyServer\E$\.

If your existing setup is configured to use an administrative share, remove the share, and reconfigure the path.

Before You Begin

Create the share as a dedicated share using specific user credentials with read/write access to the share. For more information, see File sharing over a network in Windows on the Microsoft support site.

Procedure

1. From the CommCell Browser, expand Storage Resources > Libraries.

2. Locate the library that has the mount path that uses administrative share.

3. Right-click the mount path, and then click Properties.

   The Mount Path Properties screen appears.

4. Click the Sharing tab, select the required mount path, and then click Edit.

   The Device Controller Details dialog box appears.

5. Change the administrative share path to UNC path as follows:

   1. From the MediaAgent list, select the Read/Write option.

   2. Select Network Path and select a pre-defined credential from the list.

      To add the credential, click the Create New button add a Credential Name, User Name and Password for the credential.

   3. In the Folder box, type the name of the share, followed by the path.

      For example: \\MyShare\MyFolder\MountPath1

   4. Click OK.

6. Click OK again in the Mount Path Properties dialog box.

7. Disable administrative shares on the server as described in How to remove administrative shares on the Microsoft documentation site.

8. Restart the MediaAgent for the configuration to take effect.

Related Topics

• For information on sharing a mount path using Data server IP, see Sharing a Mount Path Using DataServer-IP.

• For more information on administrative shares, see Removing Administrative Shares from Windows Servers.