Improving Web Application Security: Threats and Countermeasures

All unnecessary shares are removed from the server.

Access to required shares is restricted (the Everyone group doesn't have access).

Administrative shares (C$ and Admin$) are removed if they are not required (Microsoft Management Server (SMS) and Microsoft Operations Manager (MOM) require these shares).