Disable File and Printer Sharing for Additional Security

Summary

When you try to connect to the Internet using Dial-Up Networking, you may receive the following prompt:

More Information

This prompt is a security reminder that disabling the File And Printer Sharing network component while you have your Dial-up Networking connection open prevents unauthorized access to your files, printers, and network. If the File And Printer Sharing component is enabled for the Transmission Control Protocol/Internet Protocol (TCP/IP) stack that is bound to your Dial-Up adapter, external users of the Internet may have access to your computer or network.


NOTE: Microsoft strongly recommends not enabling the File And Printer Sharing component with Dial-up Networking.


To disable the File And Printer Sharing component for your Dial-Up adapter:

1. Click Start, point to Settings, click Control Panel, and then double-click Network.

2. Click TCP/IP->Dial-up Adapter, click Properties, and then click the Bindings tab.

3. Click to clear the File and Printer Sharing check box, click OK, and then click OK.

4. Restart your computer.

NOTE

• This disables the File And Printer Sharing component only for the Dial-Up Networking adapter. Local network file sharing or printer sharing is not affected.

NOTE: In some cases, it may be necessary to share files and printers through the same network adapter that is used to access the Internet. Enabling File and Printer Sharing using the TCP/IP protocol may expose shared files or shared printers to the Internet. A common example of this scenario occurs with cable modem or DSL connections where the broadband device is connected directly into a hub that each computer uses to connect to the home network, as in the following example:

Internet connects to a broadband device connected to a Hub that connects to home computers
To configure a network to safely share files and printers on a network adapter exposed to the Internet, unbind File and Printer sharing to TCP/IP binding to the exposed adapter:

1. Click Start, point to Settings, click Control Panel, and then double-click Network.

2. Click TCP/IP->Network adapter, click Properties, and then click the Bindings tab.

3. Click to clear the File and Printer Sharing check box, click OK, and then click OK. Restart your computer.

4. Install NetBEUI. Click Start, point to Settings, click Control Panel, and then double-click Network.

5. Click Add, click Protocol, under Manufacturers, click Microsoft and then double-click NetBEUI.

6. Click OK to restart your computer.

These procedures should be repeated on computers that need to share files or obtain access to shared files but whose adapter is exposed to the Internet.

Another solution is to install Internet Connection Sharing if you are running Windows 98 Second Edition which provides protection as documented in the following article in the Microsoft Knowledge Base:

241570 Security Features of Internet Connection Sharing
To install Internet Connection Sharing (ICS):

NOTE: ICS should only be installed on the computer that you use to connect to the Internet. This computer is called the host. The other computers on the Local Area Network (LAN) that use the host to connect to the Internet are called clients. The Internet programs on the clients should be configured to connect by using a LAN.

1. Click Start, point to Settings, click Control Panel, and then double-click Add/Remove Programs.

2. On the Windows Setup tab, click Internet Tools, and then click Details.

3. Click to select the Internet Connection Sharing check box, click OK, and then click OK.

4. Follow the instructions on the screen to run the Internet Connection Sharing Wizard.

For additional information about ICS requirements, click the article number below to view the article in the Microsoft Knowledge Base:

230140 Only One Internet Connection Sharing Host Is Required on a LAN