Improve company productivity with a Business Account.Sign Up

x
  • Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 2342
  • Last Modified:

Disable File Sharing, but printer sharing enabled.

hello,

Would be possible to only enable of the file sharing service, without disable printer sharing? When I disable port numbers 135-139 tcp/udp ports, the file and printers are disabled.

I use SYGATE firewall in the Win2k server.

Tanks,
Antenor
0
antenor
Asked:
antenor
  • 3
  • 2
1 Solution
 
Rich RumbleSecurity SamuraiCommented:
your subject line says "diable File Sharing, BUT printer sharing enabled"
Your mesage text is the sort of opposite "Would be possible to only enable of the file sharing service, without disable printer sharing" You mean leave it the same? I believe you meant "Would be possible to only DISable the file sharing service, Leaving the printing service Enabled."

In either case, the answer is no. They are mutual, one does not work without the other, niether work without 135-139, UNLESS they are win2k or later (xp, 2003)and use port 445. you can block 135-139, but if 445 is not blocked, you can share print and file services.

one of the ways to turn off file sharing in windows is with this registry entry:
HKEY_LOCAL_MACHINE
Key: SYSTEM\CurrentControlSet\Services\LanManServer\Parameters
Name: AutoShareWks
Data Type: REG_DWORD
Value: 0

However this turn off the PRINT$ (hidden share, that shares this folder " %SYSTEMROOT%\SYSTEM32\SPOOL\DRIVERS "
You see the way you share a printer is just the same as you share a folder or file.

If you disable file and print sharing... you guessed it... both at disabled. Same if the ports are blocked 135-139 plus 445.
GL!
-rich
0
 
trywaredkCommented:
I don't know if it works, but try to share %systemroot%\system32\spool\drivers manually using explorer.exe (without enabling file- and printersharing)

Share Names With a "$" Character at the End Are Hidden
http://support.microsoft.com/default.aspx?scid=kb;en-us;90929

You Cannot Access Shared Files and Folders or Browse Computers in the Workgroup
http://support.microsoft.com/default.aspx?scid=kb;en-us;318030

Using the admin share (C$) on other workstations
http://windows.about.com/library/tips/bltip239.htm

Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark

:o) Your brain is like a parachute. It works best when it's open


0
 
Rich RumbleSecurity SamuraiCommented:
It can't work... if you don't have file/print sharing enabled... then you can't share anything...  While windows will keep the "Sharing" tab in the properties window, and seemingly let you assign shares, you cannot connect to them.

There may be some 3rd party software to allow for this... but it seems unlikely. If there is someone you would like to allow on you printer, block everyone else with you firwall, but allow the IP or DNS name of the person you want to share the printer with.
-rich
0
Building an Effective Phishing Protection Program

Join Director of Product Management Todd OBoyle on April 26th as he covers the key elements of a phishing protection program. Whether you’re an old hat at phishing education or considering starting a program -- we'll discuss critical components that should be in any program.

 
antenorAuthor Commented:
Exactly, rich.

I want to blocking the access to the file sharing (remote) and allow the printer sharing, using firewall SYGATE.

I am using the Terminal Services (WIn2k) and want to prevent the file copy to the others machines in the LAN, but that to allow the users connected in TS access to the remote printer sharing.

In this in case that, blocking 135-139 ports and allowing to remote access 445, it would resolv this problem?

Antenor
0
 
Rich RumbleSecurity SamuraiCommented:
I've looked and looked... and I've even experimented a bit... I can't get one to work without the other. You can set Access permissions on printers as well as files and folders.... but that's about it. You can experiment with TS, go to the Administrative tools, and then go to Terminal Service Configuration. The Client setting (under Connections) may have what your looking for. Active directory may be able to do what you ask, I'm not sure. http://www.microsoft.com/windows2000/en/server/help/default.asp?url=/windows2000/en/server/help/sag_termsrv_topnode.htm
-rich
0
 
antenorAuthor Commented:
ok,

Tanks.
0
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

Join & Write a Comment

Featured Post

Keep up with what's happening at Experts Exchange!

Sign up to receive Decoded, a new monthly digest with product updates, feature release info, continuing education opportunities, and more.

  • 3
  • 2
Tackle projects and never again get stuck behind a technical roadblock.
Join Now