I don't have much experience in protecting windows machines, so sorry if I'm missing something obvious; how would one protect from psexec without disabling SMB? One could disable the
admin$ share, but I've read here and there that it can cause some applications to misfunction. Is it something that can be handled by a local anti-virus? Sorry for the vagueness of my question, I have looked around but I wasn't able to find much. Thanks for any answer.
Edit for clarification: in short, I'd like to know whether it's possible to share data via SMB without allowing people to execute commands on my machine via psexec.