Solved

How to disable Simple File Sharing remote on machines in a WOKRKGROUP

Posted on 2008-06-18
8
3,693 Views
Last Modified: 2008-07-03
How to disable Simple File Sharing remotely on machines in a WOKRKGROUP, we can't run remote tools like NETSH using PSEXEC because our XPs will not be on a domain (special trade show setup) and be default XPs have SFS turned on, so is there a way to disable it remotely somehow? or it's a "Catch 22" situation?

Thanks
0
Comment
Question by:piotrmikula108
  • 4
  • 4
8 Comments
 
LVL 16

Expert Comment

by:Brian Pringle
ID: 21818403
You can still use psexec.  Instead of the username being in the domain\username format, use computername\username.
0
 
LVL 1

Author Comment

by:piotrmikula108
ID: 21825248
I did try that, and as long a as the simple file sharing is enabled can't logon
0
 
LVL 16

Accepted Solution

by:
Brian Pringle earned 500 total points
ID: 21825344
If you can't even sign on remotely with psexec, then you probably can't do anything else remotely, either.  You are going to have to touch each computer to manually remove the simple file sharing.

By the way, is it Windows XP Home Edition or Professional Edition?

Home Edition will not allow you to remotely administer/run applications.
0
 
LVL 1

Author Comment

by:piotrmikula108
ID: 21825380
XP Pro, hmmm...got 50 PCs to do it on :-(
0
Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

 
LVL 16

Expert Comment

by:Brian Pringle
ID: 21825605
0
 
LVL 1

Author Comment

by:piotrmikula108
ID: 21825883
Thanks for looking this up for me!

Please see my customized script and let me if I did it right
@echo off

If {%1}=={} @echo Syntax: NoSFS 10.0.6.94, 10.0.6.95, 10.0.6.96 &goto :EOF

setlocal

:Next

if {%1}=={} endlocal&goto :EOF

set computer=%1

shift

set computer=%computer:"=%

set key="\\%computer%\HKLM\SYSTEM\CurrentControlSet\Control\Lsa"

if /i "%computername%" EQU "%computer%" set key="HKLM\SYSTEM\CurrentControlSet\Control\Lsa"

@echo reg add %key% /v forceguest /t REG_DWORD /d 00000000 /f

reg add %key% /v forceguest /t REG_DWORD /d 00000000 /f

@echo.

goto :Next

Open in new window

0
 
LVL 16

Expert Comment

by:Brian Pringle
ID: 21826291
I don't do a lot of scripting, but it looks fine.  I would say to try it on one or two computers to see if it works.  

Sorry.... I still rely heavily on command line batch files, so I don't usually need to resort to VBScript.
0
 
LVL 1

Author Comment

by:piotrmikula108
ID: 21832486
I found a program Multi-Remote-Registry-Changer (or it can be done with Windows command line tool "REG") that can disable the SFS remotely as long as the Firewall is disabled or when it's enabled the File and Printer Sharing exception is allowed

then you need to add this string to your registry

HKLM\system\currentcontrolset\control\Lsa /v ForceGuest /t Reg-Binary /d 0

and it will force no Guest mode on that machine which means the SFS will be disabled
0

Featured Post

Do You Know the 4 Main Threat Actor Types?

Do you know the main threat actor types? Most attackers fall into one of four categories, each with their own favored tactics, techniques, and procedures.

Join & Write a Comment

Issue: Unstable cursor in Windows XP and Windows runs extremely slow in that any click will bring up the Hour glass (sometimes for several seconds before giving you what you want) . Troubleshooting Process and the FINAL FIX: This issue see…
When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup". After a while, you have entered a loop for Auto repair which does not fix anything and you will be in a  panic as all your work w…
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…
Access reports are powerful and flexible. Learn how to create a query and then a grouped report using the wizard. Modify the report design after the wizard is done to make it look better. There will be another video to explain how to put the final p…

744 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

11 Experts available now in Live!

Get 1:1 Help Now