Solved

Enable File and Printer Sharing on all servers - is it a vulnerability?

Posted on 2016-12-01
6
109 Views
Last Modified: 2016-12-02
I was wondering if Enabling File and Printer Sharing on all servers is vulnerability?


The purpose of this is so that we can copy files btw servers. Do we need to enable it? What if we run Powershell script to copy files. Do we still need to turn File Printer sharing on?
0
Comment
Question by:creative555
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
6 Comments
 
LVL 95

Expert Comment

by:John Hurst
ID: 41909522
If you are properly secured, File and Print Sharing is not a security risk and there is no harm in using it.
0
 
LVL 18

Assisted Solution

by:Mal Osborne
Mal Osborne earned 250 total points
ID: 41909529
Well, yes, file and print services can be a vulnerability. Having said that, usual practice is to leave them enabled. I have seen site were a few servers have had these services blocked, SQL servers and machines in a DMZ.
0
 
LVL 95

Accepted Solution

by:
John Hurst earned 250 total points
ID: 41909532
F&P sharing is enabled on most all business computers and it is not causing issues. No more of a vulnerability than any other opening (port or connection, internet itself).
0
Does Powershell have you tied up in knots?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

 

Author Closing Comment

by:creative555
ID: 41909533
thank you!!
0
 
LVL 95

Expert Comment

by:John Hurst
ID: 41909534
You are very welcome and I was happy to help.
1
 
LVL 54

Expert Comment

by:McKnife
ID: 41910791
It is very astounding what recommendations are given here.
Of course we don't open up ports on servers if

A we don't have to since there are other ways
and
B we are worried about security

So my recommendation is not to enable file and printer sharing but use a file server for file exchange between servers instead.
0

Featured Post

Office 365 Training for IT Pros

Learn how to provision tenants, synchronize on-premise Active Directory, implement Single Sign-On, customize Office deployment, and protect your organization with eDiscovery and DLP policies.  Only from Platform Scholar.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

This article demonstrates probably the easiest way to configure domain-wide tier isolation within Active Directory. If you do not know tier isolation read https://technet.microsoft.com/en-us/windows-server-docs/security/securing-privileged-access/s…
Had a business requirement to store the mobile number in an environmental variable. This is just a quick article on how this was done.
Sending a Secure fax is easy with eFax Corporate (http://www.enterprise.efax.com). First, Just open a new email message.  In the To field, type your recipient's fax number @efaxsend.com. You can even send a secure international fax — just include t…
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question