Thursday, 2 July 2015

Win32_Share reports a type of 3221225472 (0xC0000000)

When using the Win32_Share class in WMI (for example using SELECT * FROM Win32_Share) you may see a share type of 3221225472 (0xC0000000).

This isn't documented in the WMI class documentation.
https://msdn.microsoft.com/en-us/library/aa394435%28v=vs.85%29.aspx

It appears that this is a combination of the following two values.

STYPE_SPECIAL
0x80000000

STYPE_TEMPORARY
0x40000000

https://msdn.microsoft.com/en-us/library/cc247110.aspx

This is used when the cluster service creates temporary shares. These are not displayed in the Computer Management MMC.

We've updated our Windows Server Audit Tool to reflect this for version 7.2.

No comments:

Post a Comment