By Mark Russinovich
Published: October 12, 2021
Download ShareEnum (483 KB)
Run now from Sysinternals Live.
Introduction
An aspect of Windows NT/2000/XP network security that's often overlooked
is file shares. A common security flaw occurs when users define file
shares with lax security, allowing unauthorized users to see sensitive
files. There are no built-in tools to list shares viewable on a network
and their security settings, but ShareEnum fills the void and allows
you to lock down file shares in your network.
When you run ShareEnum it uses NetBIOS enumeration to scan all the
computers within the domains accessible to it, showing file and print
shares and their security settings. Because only a domain administrator
has the ability to view all network resources, ShareEnum is most
effective when you run it from a domain administrator account.

How It Works
ShareEnum uses WNetEnumResource to enumerate domains and the
computers within them and NetShareEnum to enumerate shares on
computers.
Download ShareEnum (483 KB)
Run now from Sysinternals Live.
Runs on:
- Client: Windows Vista and higher.
- Server: Windows Server 2008 and higher.