12 Sep 2010,AndyHancock <email@example.com> in
> I originally posted this to
> microsoft.public.windowsxp.network_web, but I noticed that many
> most topics that could go into specialised subgroups actually get
> posted microsoft.public.windowsxp.general. Due to the low traffic
> in the subgroups, I was afraid that my question might be missed.
i read that ms is killing off news://..msn
afaik this is hte only *xp* group remaining.
> I am trying to turn off any kind of file/printer/resource sharing
> on Windows XP Pro SP3. First, I must admit that this is XPM
> virtual machine, but I got limited (though helpful) information at
> the technet forums *and* I believe that much of what I want to
> turn off is XP- specific rather than requiring knowledge of the
> virtual machine nature of XPM.
i've never run virtual (though what you wrote sounds logical)
> The computer will be the only one in a home situation, and will
> access the internet through a combination DSL modem router. The
> computer will connect to the modem router through either LAN cable
> or WiFi. So I don’t really need any sharing, network resource
> discovery, remote diagnostic, etc..
yes. check blackviper xp sp3 page.
> Here is what I’ve done after much reading
(yes. ;-) )
>on the internet. Your
> comments on whether it’s enough, too much so as to interfere with
> normal operation, and some of the questions about what encountered
> in applying the settings would be very much appreciated.
i'm probably wrong on *some* of these. anyone who knows better can comment :-)
> PrinterSearch: I disabled this
"automaticall search for network folders and printers"
don't need. and disabling might speed boot times?
> while the Windows Explorer was displaying the top-level C-drive folders.
don't think current folder location matters. the setting is always in that view tab.
> •Using Network Setup Wizard, specify that I connect directly to
> the internet (no local network).
run these help pages:
i believe you want to choose "residential gateway" thru your router (routermodem)
>It asks for a WorkGroup name ??
> I cancelled it because I don't want to create a network (not sure
> what the implications are for security/sharing)
afaik teh pc name won't matter for you either way. same with workgroup. the names
are (mostly?) a convenience when there are multiple name-able devices on your
network. but, your router is doing the real work.
> •Disabled LAN Properties "Client for M$ Networks"
not sure, but seems correct. google?
>and "File and
> Printer Sharing for Microsoft Networks".
almost certainly ok, since you're not using it. btw, you're just unchecking the box, but
if you delete something here, you can use "add" button to restore it. however the
"properties" may not be the same.
> •Changed Workstation service from Automatic to Disabled
check that blackviper site, but, i suspect disabling workstation is correct.
also with some services, you can set to manual, so another something will turn on
the service when needed. Then you can see that that service is running, and know not
to set it to disabled.
or otoh, disbale the service, then watch for trouble from an app that uses that service
> •Disabled Guest account
question is whether disabling guest benefits you at all.
otherwise, some people recommend running as guest, but my impression when i tried
is that xp loses too much functionality. other people suggest running as a less
restricted type of user.
> •Disabled Simple File Sharing (as above, Windows Explorer was on
> the C- drive)
afaik, "simple file sharing" is a ui setting. it's independent of whether you share or
> •I looked at Windows Firewall Exceptions: (1) Should Network
> Diagnostics be checked if I only use my DSL router/modem to
> connect to the outside rather than with local computers?
if you're using 3rd party firewall, windows fw is disabled. so afaik, these windows
firewall settings have no effect. though i think windows firewall switches on as a
fallback if it is told that th 3rd party firewall has failed/crashed whatever.
as a fallback, maybe you'd want windows firewall set most restrictively.
> with Remote Assistance?
i always turn off receive remote requests and send remote trequests (whrever those
settings are. i go thru all dialogs when i fresh install, and disable the remote stuff.
also, uninstall messenger service in add/remove.)
> •I looked at Properties for C-drive: Sharing tab shows “Share this
> folder” selected – should it be? When I click on Permissions, I
> get “This has been shared for administrative purposes. The
> permissions cannot be set.”
this looks wrong to me. normally, no matter the drive (includimng removable media
drives) the sharin tab warns against sharing "root". iow, your c:/ shouldn't be shared.
anyway, this is where "simple sharing" helps. there will be none of that "permissions"
stuff shown. (afaik)
> •I checked the sharing properties of C-drive's 4 folders:
> “Documents and Settings”, “I386”, “Program Files”, “WINDOWS”.
> Only the WINDOWS properties show that it as being shared – why
> should it be shared?
as with sharing root drive, i wonder:
who's been messing with your pc?
> •Following http://support.microsoft.com/?kbid=304040 I tried to
> apply “Level 1” access to shares and files. However, the Sharing
> tab for My Documents doesn’t have a switch to “Make this Folder
> Private”. How to execute this?
afaik, the idiot's method is to go to the "shared folders' (whatever it's called) and drag
out everything in it. i could be wrong, because iirc, i delete that shared folders thing.
> •In the above site, why is Level 1 (or any level for that matter)
> applied only to My Documents? Can’t a user create folders above
> My Documents in the folder tree? And wouldn’t you want to protect
> non- user folders high up in the folder tree?