Lock down the network connection

Depending on the version of Windows then different protocols and services are installed by default when the computer has a network adapter or a dialup modem. One seldom need other protcols than the TCPIP protocol, and should uninstall other network protocols like IPX and NetBEUI, as they generate a lot of broadcasting noise on the network, which hurts the network performance.

The Microsoft Network services allows one to share resources like files and printers, and access files and printers on other computers on the network. One should by careful about how to bind these services to the different network connections installed.

• Client for Microsoft Networks - Enables access to shared files and printers on Microsoft Networks. This service should only be installed for network connections which requires such access (Ex. dialup modems doesn't need this service).
• File and Printer Sharing for Microsoft Networks - Enables sharing of files and printers on Microsoft Network. Again this should only be installed for network connections where this is wanted, to avoid sharing personal files with all the people on the Internet (Ex. dialup modems doesn't need this service).

To configure the binding of a network connection to these services:

• Win9x - Open Network Properties and change the properties for the TCP/IP protocol, and on the "Bindings"-fan uncheck the binding to file sharing.
• Win2k - Open "Network and Dial-up Connections" and in the menu select "Advanced" -> "Advanced Settings".

If having network connections that requires access to Microsoft Networks, then one should decide who should have access to files shared on the Microsoft Network:

• How to enable Win9x filesharing in Windows 2000
• How to enable Win9x filesharing in Windows XP

If using Windows NT versions like Windows NT4, 2000, XP, 2003, then one should be make sure to lock down access to the user accounts, so people cannot logon to the machine from the network and allowing them access to the entire machine. More Info Securing the local Administrator account.

If the network connection is used to access the Internet, then it should one should strongly consider getting a firewall. Especially if not hidding behind a NAT router, which gives some protection from direct port attacks from the Internet, and if the same network connection is bound to the Microsoft Networks services for use on the Local Area Network (LAN).

Related Creating a Local Area Network (LAN)
Related Limit protocols negotiations during dialup handshake