network security

[Guest]

In Windows 98, you could assign a password to each computer or drive on your
network, so that users could not access them without the password. How does
Windows XP handle this? It appears that guests with laptops can pickup my
network and access all the machines on the network.

 

[Lanwench [MVP - Exchange]]

In

In Windows 98, you could assign a password to each computer or drive
on your network, so that users could not access them without the
password. How does Windows XP handle this? It appears that guests
with laptops can pickup my network and access all the machines on the
network.

Are you using a domain, or a workgroup (peer to peer network)?

If you're using a workgroup, are you using XP Home or Pro?

You don't password-protect folders in XP (or any NT-based operating system);
you use NTFS security which is better and more granular. Sounds like you
have guest access enabled, which isn't a good thing....

for XP Pro, which allows you to do more, see
http://www.microsoft.com/technet/security/smallbusiness/prodtech/windowsxp/sec_winxp_pro_p2p.mspx
http://support.microsoft.com/default.aspx?scid=kb;en-us;304040

For Home, you can't disable Simple File Sharing, unfortunately. I don't use
that version, or Simple File Sharing, so I'm not sure what your options are;
I think all you can do is mark your folders 'private' - but perhaps someone
else will post a reply.

 

[Malke]

In Windows 98, you could assign a password to each computer or drive
on your
network, so that users could not access them without the password.
How does
Windows XP handle this? It appears that guests with laptops can
pickup my network and access all the machines on the network.

XP does not use passwords to protect resources. It uses permissions
instead. Here is information to help you with that:

How to disable Simple Sharing and set permissions on a shared folder in
Windows XP (Pro only)
http://support.microsoft.com/?kbid=307874

HOW TO: Set, View, Change, or Remove File and Folder Permissions in
Windows XP
http://support.microsoft.com/?kbid=308418

By default in XP Home, you can only make files and folders under My
Documents "private". Otherwise, to see the security tab in WinXP Home,
restart in Safe mode and log on with an account that has administrator
privileges. To get into Safe Mode, repeatedly tap the F8 key as the
computer is starting up. This will get you to the menu where you can
choose Safe Mode.

Note that the file system must be NTFS, not FAT32.

Passwording of folders is not supported unless you zip them. When you do
(right click a folder, then "send to > compressed folder") and then open
the zip file, you will find an option under file>"add a password".
Otherwise, use third-party software. Google "password protect folders".

Malke

 

[Guest]

Actually, my guest account is "off". Don't know if that means it is enabled
or not. I'm using XP Media Center Edition SP2. The network is a workgroup.
I thought I remembered reading somewhere that if all computers on the network
have the same username/password, then all other machines could be accessed
over the network. Then my dad showed up with a laptop, and I noticed that I
could access my machines from his, even though he uses a different
username/password. That concerned me.

 

[Lanwench [MVP - Exchange]]

In

Actually, my guest account is "off". Don't know if that means it is
enabled or not.

It's disabled by default, so it sounds like it stayed that way.

I'm using XP Media Center Edition SP2.

I'm pretty sure you can disable simple file sharing that way.....which is
what you need to do.

The network
is a workgroup. I thought I remembered reading somewhere that if all
computers on the network have the same username/password, then all
other machines could be accessed over the network.

Yes, but if you're using simple file sharing, that doesn't even matter.

Then my dad
showed up with a laptop, and I noticed that I could access my
machines from his, even though he uses a different username/password.
That concerned me.

As well it should! I'm not saying you shouldn't trust your father, of
course. ;-)