Microsoft KB Archive/199346

= Disable File and Printer Sharing for Additional Security =

Article ID: 199346

Article Last Modified on 1/23/2007

-

APPLIES TO


 * Microsoft Windows 98 Standard Edition
 * Microsoft Windows Millennium Edition
 * Microsoft Windows 98 Second Edition

-



This article was previously published under Q199346



If this article does not describe your hardware-related issue, please see the following Microsoft Web site to view more articles about hardware:

http://support.microsoft.com/default.aspx/w98?sid=460



SUMMARY
When you try to connect to the Internet using Dial-Up Networking, you may receive the following prompt:

File and printer sharing is running on the TCP/IP connection you will use to access the Internet. Other users on the Internet might be able to access your files.

Would you like Windows to disable file and printer sharing on the TCP/IP connection to the Internet?



MORE INFORMATION
This prompt is a security reminder that disabling the File And Printer Sharing network component while you have your Dial-up Networking connection open prevents unauthorized access to your files, printers, and network. If the File And Printer Sharing component is enabled for the Transmission Control Protocol/Internet Protocol (TCP/IP) stack that is bound to your Dial-Up adapter, external users of the Internet may have access to your computer or network.

NOTE: Microsoft strongly recommends not enabling the File And Printer Sharing component with Dial-up Networking.

To disable the File And Printer Sharing component for your Dial-Up adapter:


 * 1) Click Start, point to Settings, click Control Panel, and then double-click Network.
 * 2) Click TCP/IP->Dial-up Adapter, click Properties, and then click the Bindings tab.
 * 3) Click to clear the File and Printer Sharing check box, click OK, and then click OK.
 * 4) Restart your computer.

NOTE
 * This disables the File And Printer Sharing component only for the Dial-Up Networking adapter. Local network file sharing or printer sharing is not affected.

NOTE: In some cases, it may be necessary to share files and printers through the same network adapter that is used to access the Internet. Enabling File and Printer Sharing using the TCP/IP protocol may expose shared files or shared printers to the Internet. A common example of this scenario occurs with cable modem or DSL connections where the broadband device is connected directly into a hub that each computer uses to connect to the home network, as in the following example:

Internet connects to a broadband device connected to a Hub that connects to home computers

To configure a network to safely share files and printers on a network adapter exposed to the Internet, unbind File and Printer sharing to TCP/IP binding to the exposed adapter:
 * 1) Click Start, point to Settings, click Control Panel, and then double-click Network.
 * 2) Click TCP/IP->Network adapter, click Properties, and then click the Bindings tab.
 * 3) Click to clear the File and Printer Sharing check box, click OK, and then click OK. Restart your computer.
 * 4) Install NetBEUI. Click Start, point to Settings, click Control Panel, and then double-click Network.
 * 5) Click Add, click Protocol, under Manufacturers, click Microsoft and then double-click NetBEUI.
 * 6) Click OK to restart your computer.

These procedures should be repeated on computers that need to share files or obtain access to shared files but whose adapter is exposed to the Internet.

Another solution is to install Internet Connection Sharing if you are running Windows 98 Second Edition which provides protection as documented in the following article in the Microsoft Knowledge Base:

241570 Security Features of Internet Connection Sharing

To install Internet Connection Sharing (ICS):

NOTE: ICS should only be installed on the computer that you use to connect to the Internet. This computer is called the host. The other computers on the Local Area Network (LAN) that use the host to connect to the Internet are called clients. The Internet programs on the clients should be configured to connect by using a LAN.
 * 1) Click Start, point to Settings, click Control Panel, and then double-click Add/Remove Programs.
 * 2) On the Windows Setup tab, click Internet Tools, and then click Details.
 * 3) Click to select the Internet Connection Sharing check box, click OK, and then click OK.
 * 4) Follow the instructions on the screen to run the Internet Connection Sharing Wizard.

For additional information about ICS requirements, click the article number below to view the article in the Microsoft Knowledge Base:

230140 Only One Internet Connection Sharing Host Is Required on a LAN

Additional query words: HWPRNHT 98

Keywords: kbdialup kbinfo KB199346

-

[mailto:TECHNET@MICROSOFT.COM Send feedback to Microsoft]

© Microsoft Corporation. All rights reserved.