Two security Q's

[pete]

First Q,
I want to share my pc's printer on a network workgroup, (no domain or
server, fixed IP addresses, DNS and gateway from the Firewall Dns server),
but the network wizard does not recommend using SFS and guest account, due
my internet connection though a network hub/switch, then the hardware
firewall and finally asdl. As it is at the moment ,workgroup members have to
log-in, which means that I have to set them up as users on my PC, not very
practical. Can I force SFS and the guest account without compromising my
security?


Second Q,
Even logged in as the Administrator, When I select Application or System in
Event Viewer I get Access Denied, any ideas?

 

[David H. Lipman]

From: "pete" <[email protected]>

| First Q,
| I want to share my pc's printer on a network workgroup, (no domain or
| server, fixed IP addresses, DNS and gateway from the Firewall Dns server),
| but the network wizard does not recommend using SFS and guest account, due
| my internet connection though a network hub/switch, then the hardware
| firewall and finally asdl. As it is at the moment ,workgroup members have to
| log-in, which means that I have to set them up as users on my PC, not very
| practical. Can I force SFS and the guest account without compromising my
| security?
|
| Second Q,
| Even logged in as the Administrator, When I select Application or System in
| Event Viewer I get Access Denied, any ideas?
|

Do you really mean a a Router instead of "network hub/switch" ?
Usually you need a Router to share DSL.

If so I suggest blocking both TCP and UDP ports 135 ~ 139 and 445 on the router to increase
the security.

I also suggest that you do logon to each PC and have passwords for each user.

 

[Steven L Umbach]

You can still use simple file sharing if you want and trust all your users.
The risk is that if you had no firewall that those shares would be available
to anyone on the internet assuming your ISP allows FPS ports over the
interment which many do not any more. Since you have a hardware firewall
device I would say you are pretty safe. Software/host firewalls on the other
hand can be disabled by malware or software conflicts but certainly are a
valuable part of defense in depth for those that want to use them.

As far as your logs make sure that the account you are using is not also a
member of the guests group. The command net user username will quickly show
group membership. Otherwise you may have a registry setting or local Group
Policy for XP Pro denying access. For XP Pro you can use the mmc snapin for
Resultant Set of Policy to see what Group Policy settings are applied to the
computer. --- Steve

 

[Sparda]

First Q,
I want to share my pc's printer on a network workgroup, (no
domain or
server, fixed IP addresses, DNS and gateway from the Firewall
Dns server),
but the network wizard does not recommend using SFS and guest
account, due
my internet connection though a network hub/switch, then the
hardware
firewall and finally asdl. As it is at the moment ,workgroup
members have to
log-in, which means that I have to set them up as users on my
PC, not very
practical. Can I force SFS and the guest account without
compromising my
security?


Second Q,
Even logged in as the Administrator, When I select Application
or System in
Event Viewer I get Access Denied, any ideas?

It’s a bad idea to force guest account’s over any network, but it
is posible, but I suspect only on XP Pro, becasue you would have to
edit the security policys manualy, which you carn’t do on Home.

 

[pete]

Yes I have xp pro on all machines, except 2 which are win98se. I understand
the hardware firewall is a router which then connects to a switch hub.
I will try to find my way around the mmc console to see what is denying me
access.
Many thanks!