Hide a Workgroup

[Pluto]

Hi All

I'm working in a new Business Centre where several businesses rent offices. They all share a broadband connection which is working fine, and all have their own Workgroups set up. The problem i've got is that I want to hide my Workgroup (called Reception) from the other three Workgroups. At the moment, I can see all four workgroups, which means of course that they can all see me! Is there a way of doing this, or do I have to use a different switch for each office? And also, how do i stop others from joining my Workgroup?

Many thanks.

[PBase001]

Try disabling Netbios over TCP/IP.

[Fubarian]

if there's a wins server, remove the entries for the workgroup as well.

[PBase001]

Keep in mind that Windows uses Netbios over TCP to announce itself on a Windows network especially if you don't have a DNS or Active Directory running and if you're sharing files, you'll probably lose browse ability and have to at least manually map shares.

[3fingersalute]

Do you need server and file sharing services on your workgroup at all?

[Pluto]

Hi

Yes the only share I need is the printer - and this is how the problem started - someone unknown sent a print of, shall we say, a part of the male anatomy, to their printer which understandably upset the staff. Then I noticed I could see all four separate workgroups. Unfortunately now I'm off for easter, so won't be at work til next Tuesday. However, I will check windrivers.

Thanks Guys

[3fingersalute]

Do you have a server in place? If so, get some user groups set up and lock down those shares.

[Pluto]

Nope - no server, just 3 PC's in the same Workgroup.

[3fingersalute]

What are the OS's of the 3 pc's? Can you just do user/password level shares?

[Pluto]

All XPPro SP2. The only share I need is the printer and I can't seem to restrict it to just the three users. When the rogue document was sent, in the printer properties it came up as "guest" who had sent it to print. All guest accounts are not enabled.

[shamus]

All guest accounts are not enabled. As an aside to the advice given for your problem, I get rid of the Guest account entirely. Steps are here:
http://www.winguides.com/forums/showflat.php?Cat=&Board=brdNewTweaks&Number=70039&page=6&view=expanded&sb=9&part=

[PBase001]

Network printer? Is there log keeping on the printer. Might be able to back trace IP or Mac address.

Was it ascii picture or an actual picture.

Someone could use <net print> to avoid some obvious detections.

Meaning, they have a valid login to your network, but use net print to indicate a seperate set of credentials.

Better to try to trace directly to IP or mac address if possible.

[CeeBee]

Rename the group to Reception$.

[3fingersalute]

Rename the group to Reception$.
Does the dollar sign hide workgroup names as well? I thought that only worked with shares?

Even so, if it only works with shares, that would still be a good option for hiding the printer share.

[CeeBee]

Does the dollar sign hide workgroup names as well? I thought that only worked with shares?
It hides computer names and shares.. so I would assume it hides workgroup names too...

[3fingersalute]

It hides computer names and shares.. so I would assume it hides workgroup names too...
interesting, i've only ever used it for shares before. Well, even so, he could at least use it on the computer or share name the printer is physically attached to, which would help eliminate if being "discovered" by people browsing the network.

[PBase001]

Just tested and unless I'm doing something wrong, my <Testworkgroup$> is viewable via my Windows 2000 machine from viewing <Entire Network>.

[CeeBee]

Ok so then it doesn't work for workgroups.. only choice is to change the computer name or the share name (these 2 *do* work).

[PBase001]

Actually you're probably on the right track here, just that hidden names applies to shares and a printer share would apply.

So if his printer share is, HPLasr (5 characters for pre-2000 machines) just make it HPLasr$ instead.

[Pluto]

Many thanks for your suggestions guys - sorry about my late reply - had easter off. I will go try the $ share name option & let you know what happens.....

[Pluto]

That didn't work unfortunately - can't hide the printer port from anyone who browses for a port when adding a new printer... will keep trying!

[PBase001]

Give this a try.

http://www.windowsnetworking.com/kbase/WindowsTips/WindowsNT/RegistryTips/Hide/Hideprinterbydisablingbrowsethread.html

[Pluto]

No good either! I'll keep trying and investigating..

[PBase001]

Have you flush the DNS cache of the computers?

<ipconfig /flushdns>

Also who administer the computers? XP has a habit of picking up shares automatically and you might have to remove old entries before the fix will work.

[futuretech]

Why not set permissions on the shared printers and only allow the people you want to have the ability to print set in the permissions?