how to secure shared folders — ucla engineering seasnet computing facility

8/10/2019 How to Secure Shared Folders UCLA Engineering SEASnet Computing Facility

1/6


http://www.seasnet.ucla.edu/network/security/securing-your-computer/how-to-secure-shared-folders 1/6

How to Secure Shared Folders What is folder sharing?From a normal install of Windows 2000/XP, a service called File and Printer Sharing is turned on.The way files are shared is by enabling shared access to a folder. Hence, for simplification, we shall just call it shared folders.

What is the risk? Windows XP by default uses a sharing type called Simple File Sharing (SFS).* This type of sharingallows anyone on the network to access your shared files and folders without a password.** It is moresuited towards a small network where you know the other users and trust them; for example a homenetwork. Also, in Windows 2000 and Windows XP (with SFS turned off), if you administrator'spassword is weak, an attacker can get into your computer and cause a lot of damage.

What can I do? Ask yourself if you need to share files/folders. Yes or No?

If you do not need to share files/folders, turn off File and Print Sharing and/or turn off the firewallexception for File and Print sharing (webpage to explain this in progress).

Click Start, click Run..., and type in "ncpa.cpl"

Press Enter/Click OK

For each network entry, perform the next two steps:Right-click and select Properties

Wired networks are usually called Local Area Connection and Wireless networks are calledWireless Network Connection
http://www.seas.ucla.edu/security/share_folder.html#no_sharehttp://www.seas.ucla.edu/security/share_folder.html#yes_sharehttp://www.seas.ucla.edu/security/passwords.htmlhttp://www.seas.ucla.edu/security/share_folder.html#detailshttp://www.seas.ucla.edu/security/share_folder.html#details


2/6



In the box that lists This connection uses the following items:Un-check the File and Printer Sharing for Microsoft Networks

Click OK

If you do need to share folders, please make sure to

1. Create a limited account to use for sharing:Click Start , Click Run... , enter "nusrmgr.cpl", Click Create a new account ,Enter a username, click Next, click Limited, and click Create Account


3/6



2. Make sure you have strong passwords for ALL the accounts on your computer3. Set permissions on your shared folders

Right-click on the folder to be shared and select Sharing and Security...

Select Share this folder to enable sharing and change the Share name if you wish

Then click on Permissions
http://www.seas.ucla.edu/security/passwords.html


4/6



Remove Everyone and add the user created earlier for sharing


5/6



Make sure to Allow the minimum needed permissions


6/6



*Simple file sharing is on always for XP Home. It can be disabled in XP Pro.**For more details, please see Microsoft's instructions on how to configure file sharing.Note: Staff managed machines will need File and Printer Sharing to be left on, please do not turn itoff.

UCLA Engineering

Copyright 2014 UCLA

UCLA Home | Terms of Use | Contact Us | Emergency/Lab Safety | Accessibility | Site Map
http://www.seasnet.ucla.edu/sitemaphttp://www.seasnet.ucla.edu/accessibility-infohttp://www.engineer.ucla.edu/research/safety-first/http://www.seasnet.ucla.edu/contacthttp://www.seasnet.ucla.edu/terms-of-usehttp://www.ucla.edu/http://www.engineer.ucla.edu/http://support.microsoft.com/default.aspx?scid=kb;en-us;304040

how to secure shared folders — ucla engineering seasnet computing facility

Documents