Force admin$ share and C$ share across the network as well as simple file sharing turned off

I am trying to get Symantec Endpoint Protection working (trial). I have succeeded but found that on the windows xp machines I need to turn off simple file sharing and share admin$ and c$ as admin shares. Is there a clever way of automating these settings? I really dont want to touch all the machines in the network.

Thanks

From serverfault JohnyV

• If your machines are joined to a domain, simple file sharing is turned off automatically, so I'm guessing there's no domain environment here. Actually, I don't think simple file sharing can be used at all in a domain environment.

  Do you run a domain for your production network? If so, is your test machine connected to the domain? If not, this is the root of your issue.

  We can provide workarounds if you're in a workgroup environment, but a domain would be preferable to reduce your hassle.

  JohnyV : No it is a domain environment. And the test machine is on the domain. I had to change these settings manually on this machine and I checked another in the domain and the same issue was present
  From Chris Thorpe

• I would create a GP to recreate the shares via a boot script, or just add the following to the user logon scripts. May require the user to have local Admin rights on the wkstn.
  Net Use Admin$
  Not sure if that will work with the C$ share.

  

  If the logon user must be a local admin then you can do that temporarily via GP by:
  Create an AD Group called Local_Wkstn_Admins
  Add all of the users to that group in AD Using a boot script via GP, add the Local_Wkstn_Admins group to the local Administrators group.
  After 24-48 hours then either remove the Local_Wkstn_Admins from the local Administrators Group and/or remove all users from the AD group Local_Wkstn_Admins.
  Above is not perfect security but a way to get it done!

  From Ed Fries

• How about those 2?

  http://www.petri.co.il/disable_administrative_shares.htm

  http://windowsitpro.com/article/articleid/44621/q-how-can-i-use-group-policy-to-control-whether-the-default-administrative-shares-are-created.html

  JohnyV : I did find these references but the custom ADM did not work. I had to modify it to get it to work and it then worked. i used a combination of the 2 to get it to work. Thanks.
  From Tanarri