?
Solved

Disable File Sharing, but printer sharing enabled.

Posted on 2004-04-19
6
Medium Priority
?
2,301 Views
Last Modified: 2013-12-04
hello,

Would be possible to only enable of the file sharing service, without disable printer sharing? When I disable port numbers 135-139 tcp/udp ports, the file and printers are disabled.

I use SYGATE firewall in the Win2k server.

Tanks,
Antenor
0
Comment
Question by:antenor
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
6 Comments
 
LVL 38

Expert Comment

by:Rich Rumble
ID: 10865340
your subject line says "diable File Sharing, BUT printer sharing enabled"
Your mesage text is the sort of opposite "Would be possible to only enable of the file sharing service, without disable printer sharing" You mean leave it the same? I believe you meant "Would be possible to only DISable the file sharing service, Leaving the printing service Enabled."

In either case, the answer is no. They are mutual, one does not work without the other, niether work without 135-139, UNLESS they are win2k or later (xp, 2003)and use port 445. you can block 135-139, but if 445 is not blocked, you can share print and file services.

one of the ways to turn off file sharing in windows is with this registry entry:
HKEY_LOCAL_MACHINE
Key: SYSTEM\CurrentControlSet\Services\LanManServer\Parameters
Name: AutoShareWks
Data Type: REG_DWORD
Value: 0

However this turn off the PRINT$ (hidden share, that shares this folder " %SYSTEMROOT%\SYSTEM32\SPOOL\DRIVERS "
You see the way you share a printer is just the same as you share a folder or file.

If you disable file and print sharing... you guessed it... both at disabled. Same if the ports are blocked 135-139 plus 445.
GL!
-rich
0
 
LVL 12

Expert Comment

by:trywaredk
ID: 10866388
I don't know if it works, but try to share %systemroot%\system32\spool\drivers manually using explorer.exe (without enabling file- and printersharing)

Share Names With a "$" Character at the End Are Hidden
http://support.microsoft.com/default.aspx?scid=kb;en-us;90929

You Cannot Access Shared Files and Folders or Browse Computers in the Workgroup
http://support.microsoft.com/default.aspx?scid=kb;en-us;318030

Using the admin share (C$) on other workstations
http://windows.about.com/library/tips/bltip239.htm

Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark

:o) Your brain is like a parachute. It works best when it's open


0
 
LVL 38

Expert Comment

by:Rich Rumble
ID: 10868363
It can't work... if you don't have file/print sharing enabled... then you can't share anything...  While windows will keep the "Sharing" tab in the properties window, and seemingly let you assign shares, you cannot connect to them.

There may be some 3rd party software to allow for this... but it seems unlikely. If there is someone you would like to allow on you printer, block everyone else with you firwall, but allow the IP or DNS name of the person you want to share the printer with.
-rich
0
Comprehensive Backup Solutions for Microsoft

Acronis protects the complete Microsoft technology stack: Windows Server, Windows PC, laptop and Surface data; Microsoft business applications; Microsoft Hyper-V; Azure VMs; Microsoft Windows Server 2016; Microsoft Exchange 2016 and SQL Server 2016.

 

Author Comment

by:antenor
ID: 10868743
Exactly, rich.

I want to blocking the access to the file sharing (remote) and allow the printer sharing, using firewall SYGATE.

I am using the Terminal Services (WIn2k) and want to prevent the file copy to the others machines in the LAN, but that to allow the users connected in TS access to the remote printer sharing.

In this in case that, blocking 135-139 ports and allowing to remote access 445, it would resolv this problem?

Antenor
0
 
LVL 38

Accepted Solution

by:
Rich Rumble earned 1500 total points
ID: 10869060
I've looked and looked... and I've even experimented a bit... I can't get one to work without the other. You can set Access permissions on printers as well as files and folders.... but that's about it. You can experiment with TS, go to the Administrative tools, and then go to Terminal Service Configuration. The Client setting (under Connections) may have what your looking for. Active directory may be able to do what you ask, I'm not sure. http://www.microsoft.com/windows2000/en/server/help/default.asp?url=/windows2000/en/server/help/sag_termsrv_topnode.htm
-rich
0
 

Author Comment

by:antenor
ID: 10889426
ok,

Tanks.
0

Featured Post

Four New Appliances. Same Industry-leading Speeds.

But don't take it from us.  The Firebox M370 is Miercom tested and Miercom approved, outperforming its competitors for stateless and stateful traffic throughput scenarios.  Learn more about the M370, M470, M570 and M670 and find the right solution for your organization today!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Users of Windows 10 Professional can disable automatic reboots using the policy editor. This tool is not included in the Windows home edition. But don't worry! Follow the instructions below to install (a Win7) policy editor on your Windows 10 Home e…
Article by: btan
The intent is not to repeat what many has know about Ransomware but more to join its dots of what is it, who are the victims, why it exists, when and how we respond on infection. Lastly, sum up in a glance to share such information with more to help…
Visualize your data even better in Access queries. Given a date and a value, this lesson shows how to compare that value with the previous value, calculate the difference, and display a circle if the value is the same, an up triangle if it increased…
In this video, Percona Director of Solution Engineering Jon Tobin discusses the function and features of Percona Server for MongoDB. How Percona can help Percona can help you determine if Percona Server for MongoDB is the right solution for …
Suggested Courses
Course of the Month8 days, 18 hours left to enroll

765 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question