You need to share some/or all of these, but you can change the permissions
on the shares. Here is something from the resource guide that might help:
When Microsoft Exchange Server is installed, Setup creates several shared
directories so other Microsoft Exchange Server computers can access the
files in the directories. By default, Setup sets permissions on these
directories that are sufficient for most organizations. However, you can
change the permissions if you are concerned that the default permissions on
these directories dont give the files enough protection against attacks by
Caution You should change permissions on these directories only if
necessary because changes could damage your Microsoft Exchange Server
Setup creates the following shared directories:
Add-ins Contains files that the Administrator program uses to display
information about connectors. This directory is shared as Add-ins.
Address Contains files for creating e-mail addresses. This directory is
shared as Address.
Connect Contains files for Microsoft Exchange Server connectors. This
directory is a hidden share that is shared as connect$.
Connect\Msmcon\Maildata Contains files used for Microsoft Mail. This is a
hidden share that is available only if the Microsoft Mail Connector is
installed. It is shared as maildat$.
Res Contains files, such as logs for Event Viewer and Windows NT
Performance Monitor, used by the local computer and remote computers. This
directory is shared as resources.
Tracking.log Contains files used for message tracking. This directory is
shared as tracking.log.
The following permissions are granted to these directories:
Permission Type of access
Everyone Read (except for Maildata, which has full control)
Service account Full control
Local administrators Full control
To restrict access to the shared directories, remove the Everyone
permission and give permissions to specific accounts using File Manager.
Use the following guidelines for restricting access on shared directories.
Only administrators responsible for message tracking should have
permissions for the Tracking.log directory because it may contain sensitive
information about messages.
You can give other administrators permissions to the Add-ins, Address,
Connect, and Res directories. Only administrators that need to administer
the Microsoft Mail Connector should have permissions on Maildata. If you
are using the Microsoft Mail External program for message transfer, also
give the account for this program permissions for the Maildata directory.
Do not change permissions for the service account and local
administrators because this can have unpredictable results.