A Tip A Day - Updated Daily

[bad boy]

7 July , 2008

Find Missing Computers in My Network Places

I'm trying to open a file on another PC on my network, but it doesn't show up in My Network Places . This is driving me crazy!

This is a really common problem, and one that is not always easily solved. First, a remote computer may not appear in My Network Places if it doesn't have any files or printers shared.

Shared folders on remote PCs can show up in two places in the My Network Places folder: shortcuts to previously accessed folders sometimes appear right in the My Network Places folder itself, but for a complete list, navigate to \ Entire Network\ Microsoft Windows Network , open your network (e.g., MSHOME ), and then open any PC to show its shared folders and printers.

Also, you may or may not see a PC that is in another workgroup in the Microsoft Windows Network folder in My Network Places . If you don't see the other workgroup, and you have control over the other PC, change its workgroup name to match the rest of the PCs on your network.

Open the System control panel (or right-click My Computer and select Properties), and then choose the Computer Name tab. The name of your PC, as well as the workgroup to which it belongs, is shown here (see Figure); click the Change button to rename the PC or join a different workgroup. All the PCs on your network should belong to the same workgroup, but no two PCs should share the same computer name.

If the workgroup matches but the PC still doesn't show up, one trick that often works is to type the name of the PC directly into Windows Explorer's address bar. (If you don't see the address bar, select View Toolbars --> Address Bar.) Erase the text in the address bar, and type two backslashes followed by the missing PC's name, like this: \\misterx
where misterx is the name of the remote PC. Press Enter, and with luck and about 510 seconds of patience Windows should list the shared folders on the remote computer.

If you still can't see the PC, make sure the network is functioning on both the remote computer and the local PC (the one you're sitting in front of). If they're both connected to a router that provides a shared Internet connection, for instance, open a web browser on each PC to test the connection. If you can load a web site, the network is working.
Often, you can force stubborn computers to show up by setting a static IP address for each PC on your network. Then use the ping command to test connectivity. Select Start --> Run, type cmd , and click OK to open a Command Prompt window, and then type:

ping 192.168.1.107

In this example, 192.168.1.107 is the IP address of the remote PC; replace this with the appropriate address. If you get a reply like the following from the remote machine, it means your computer can see and successfully communicate with that machine on your network:
Reply from 192.168.1.107: bytes=32 time=3ms TTL=64
If, on the other hand, you see a timeout message like this, the connection is broken:

Request timed out.

File sharing will not work as long as ping returns this error, so your best bet is to check your hardware and IP address settings instead of toiling with the My Network Places folder.

If the network checks out but you still can't see the remote PC, try restarting both computers and resetting your router (refer to your router's instructions for the reset procedure).

If all else fails, it's likely a problem with the hardware. Try replacing the cables if you have a wired network

[bad boy]

08 July 2008

Protect Shared Files

I want to share a bunch of files with other PCs on my network, but I'm worried that doing so will allow anyone to see them. How do I protect my data?

Any computer connected to your PC over a network including the several billion machines on the Internet may be able to access the files in your shared folders. Thus, the best way to protect your data is to not share it in the first place. If you need to share files, exclude folders that contain particularly sensitive data.

The first thing you need to do is set a password for your user account. Open the User Accounts control panel, select your account from the list, and then click "Create a password." Type your password twice, followed by a clue to act as a reminder down the road (you may well need it),
and then click the Create Password button when you're done. Thereafter, anyone wanting to access your files from another computer on your network will have to supply the password (with some exceptions for Windows XP Professional).

Now, unless you employ some sort of firewall anyone outside your local network namely, everyone on the Internet can access your data (and yes, no matter how uninteresting you may think the contents of your PC are, this can happen to you). Windows XP comes with the "Windows Firewall," a feeble software-based solution, but nothing beats a hardware firewall placed between you and the rest of the world. If you don't have one already, get yourself a router for this purpose.

What About Encryption?

Windows XP Professional also has some built-in data encryption features, but encryption offers no more protection than restrictive permissions when using shared folders. Rather, encryption is designed to protect your data from those who use your PC directly, either by sitting in front of it
or by remote control using Terminal Services (a.k.a. Remote Desktop).

Warning: If you're using a wireless network, anyone within range may be able to join your network and access your files.

For any more protection, you'll need to use permissions , which are special settings that control precisely who can do what to your files. Permissions are available only in Windows XP Professional (and Media Center Edition); if you're using Windows XP Home, your ability to protect your data effectively stops here.

On an XP Pro system, every file, folder, and drive has two sets of permissions you can set: permissions for local users (other people sitting at your PC), and permissions for anyone accessing your files through a shared folder. To set the permissions for a shared folder, right-click the folder, select Properties, choose the Sharing tab, and then click the Permissions button. The Share Permissions window, shown in Figure, shows a list of configured users in the top list, and the specific things the selected user is allowed to do down below.

First, make sure your own username appears in the upper list; if it doesn't, or if it merely shows "Everyone" (like the one in Figure), click the Add button. Type your usernameor the username of the person you want to be able to access your stuff in the "Enter the object names to select" field, and then click the Check Names button. If Windows underlines what you've typed, the username is okay; otherwise, you'll get a "Name not Found" message. Click OK when you're done adding names.

Next, highlight your username in the "Group or user names" list, and place checkmarks in the boxes in the Allow column below as you see fit. Want others to be able to read the files in this folder but not change any of them? Put a checkmark in the Read box, but not in the Full Control
or Change boxes.

Note: In most cases, you won't have to bother with the checkboxes in the Deny column unless you start messing with "groups" of users. Permission to carry out a given action is implicitly denied as long as there's no checkmark in the corresponding Allow box .

If you want to deny any user access to your files particularly the self-explanatory "Everyone"highlight the username, and click the Remove button. Now, any user who is not expressly listed here (or included in any groups listed here) will not have access to your shared files.

When you're done, click OK. The changes take effect immediately and apply to the selected folder share, as well as to all subfolders and files contained therein.

Note: By adding someone else's username to the Permissions window, you can protect your data without handing over your username and password. If your PC is part of an NT domain (typical in a corporate environment), you can add users from your domain or even another domain by clicking the Locations button to change the scope of the user validation. But on a home network, you'll need to create a new user account on your PC (using the User Accounts control panel) before you can type it into the Permissions window .

[bad boy]

9 July 2008



Share an Entire Drive

I looked at the Sharing tab for my C : drive, and the "Share this folder"
option is selected, meaning the drive is currently being shared. However, I don't see it in My Network Places . What's going on?

In Windows XP Professional (and Media Center Edition), all drives are shared automatically. For instance, the Sharing tab for drive C: on your PC probably looks like the one shown in Figure. (None of this applies to Windows XP Home.)

Microsoft calls this an administrative share , and it's enabled by default so that tools such as the Computer Management utility (accessed by going to Start --> Run and typing compmgmt.msc ) running on a remote computer can operate on your PC. The dollar sign at the end of the share name (e.g., C$ ) identifies it as a hidden share, which means it won't ever show up in My Network Places . All it takes to view a hidden share is to type the share name into Windows Explorer's address bar, like this:

\\mycomp\c$

In this example, mycomp is the name of your computer. Provided there aren't any password or permission restrictions, anyone can access the files in this shared folder as readily as any non-hidden share.


Warning: Yes, administrative shares indeed constitute a potential security risk, as they allow access to any files on your hard disk, whether they're in folders you've specifically shared or not.

Now, you can use these administrative shares to access your drives remotely, as explained earlier, but if you want to share your drive so that it shows up in My Network Places , just click the New Share button at the bottom of the window. In the New Share dialog box, type a share name (e.g., C ), set any permissions, and click OK.

Note: Concerned about security? Instead of sharing the entire drive, just share the individual folders you need to access across your network .

[bad boy]

10 July 2008

List All Your Shared Folders

I know a folder is being shared when I see that little hand icon on top of the yellow folder icon. But all it takes is one forgotten share to leave my private files open to prying eyes. Can I get a comprehensive, reliable list of everything being shared on my PC?

You can simply open the My Network Places folder in Windows Explorer and navigate through Entire Network to find your PC and a list of all its shared resources, but this listing doesn't necessarily show everything that's being shared. Specifically, any hidden shares are, well, hidden.

To view all your network shares including the hidden ones select Start --> Run, type compmgmt.msc , and click OK to open the Computer Management tool. In the System Tools branch on the left, click the [+] icon next to Shared Folders to expand it, and then highlight the Shares folder, as shown in Figure.

Any share with a dollar sign at the end of its name (e.g., C$ ) is hidden. While hidden shares don't show up in My Network Places , you can access them just as readily as non-hidden shares.

From here, you can right-click any share and select Stop Sharing to turn it off, making this window a very convenient place to quickly tighten up security on your system. If you add or remove any shares in Windows Explorer, press the F5 key or click the Refresh button on the toolbar to update the list.

Although you can stop sharing any hidden share (such as C$ ) in this window, Windows will recreate all administrative shares the next time you start your computer, in effect sharing every file on your PC whether you want it to or not. To stop this from happening, see "Tomorrows Tip"

[bad boy]

11 July 2008

Turn Off Administrative Shares

Windows insists on sharing my entire hard disk, despite the fact that I've only elected to share specific folders. What are administrative shares, and why can't I turn them off?


Hmm… it's almost as though Microsoft cares more about corporate strategy than the personal security of their customers. Funny, that.
If you're using Windows XP Professional (or Media Center Edition), your entire hard disk is indeed being shared on your network whether you like it or not.

If you open Windows Explorer, right-click drive C :, and select Sharing and Security, you'll see that the drive is already shared as C$ . This is called an administrative share , and although the $ suffix makes it hidden in My Network Places , users on your network can still browse the
share thereby gaining access to all the files on your drive by typing the following path into Windows Explorer's address bar:

\\mycomp\c$

where mycomp is the name of your PC. Combine this with the fact that user accounts don't have passwords by default, and you'll see how insecure Windows XP can be.

Administrative shares allow network administrators to install software, run Disk Defragmenter, or perform other maintenance on your PC remotely. But unless you're in a corporate environment, you have nothing to gain by leaving this back door open… and everything to lose.

To patch this hole, open the Registry Editor (go to Start --> Run and type regedit ), and navigate to
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\lanmanserver\parameters . In the right pane, double-click the AutoShareServer value, type 0 in the "Value data" field, and click OK. Then double-click the AutoShareWks value, type 0 in the "Value data" field, and click OK. Close the Registry Editor when you're done.

Next, go to Start --> Run, type compmgmt.msc , and click OK to open the Computer Management tool. In the System Tools branch on the left, click the [+] icon next to Shared Folders to expand it, and then highlight the Shares folder. To manually remove the administrative shares, right-click each one (e.g., C$, D$, E$ ) and select Stop Sharing. Go ahead and remove any hidden share (anything with a dollar sign in the name), with the following three exceptions:

IPC$ , which stands for Inter-Process Communication, is used for remote administration of your computer, something very few people need outside of a corporate environment. Although it has been proven that the IPC$ share can be exploited, the only way to disable it permanently is to turn off file sharing altogether. You can stop sharing IPC$ temporarily, but Windows will recreate the share the next time you restart.

print$ is used to exchange printer driver files when you share a printer. You should leave this share intact.

wwwroot$ will be present if Microsoft's Internet Information Server (IIS) software is installed. Leave this share intact if you want to use your computer as a web server or a web software development platform.

When you're done, restart your computer, and then reopen the Computer Management tool to check your work.

[bad boy]

12 July 2008

Speed Up Network Browsing

It seems to take forever to browse the folders on the other PCs on my network. How can I speed things up?


The Scheduled Tasks folder, which appears in My Network Places along with your shared folders and printers, is responsible for much of the slowdown. Since the shared Scheduled Tasks folder takes so long to load, and has very little value to most Windows users, you can just
turn off the share to speed things up.

Open the Registry Editor (select Start --> Run and type regedit ), and navigate to
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\RemoteComputer\NameSp
. Inside the NameSpace key, you may see one or several subkeys, each responsible for a special shared folder.

To see what any one of these subkeys does, select it and look at the (Default ) value in the right pane. To stop sharing Scheduled Tasks , just delete the {D6277990-4C6A-11CF-8D87-00AA0060F5BF} key.

While you're here, you can further improve performance by turning off the Printers and Faxes share. If you don't plan on sharing any printers, delete the {2227A280-3AEA-1069-A2DE-08002B30309D} key.

Close the Registry Editor when you're done. The change should take effect immediately.

Note: If, for some reason, you want to re-enable the Scheduled Tasks share, just recreate the subkey. Select Edit --> New --> Key and type {D6277990-4C6A-11CF-8D87-00AA0060F5BF } for its name .

[bad boy]

13 July 2008

Connect to a Windows 9X/Me

I have an old Windows 98 system I need to network with my Windows XP machine, but I can't seem to get the two PCs to communicate.

Getting XP to happily communicate with Windows 9x machines over a network can be a bit of a chore. Fortunately, there are two tactics that usually solve the problem.

First, assign a static IP address to each PC on your network, regardless of the Windows version being used.

Second, Windows 95 and Windows 98 (and occasionally Windows Me) install a driver called NetBEUI by default. NetBEUI is not compatible with Windows NTbased systems (such as Windows XP and 2000), and it can cause problems if installed on any system on your network. To remove
NetBEUI from a Windows 95/98/Me system, open the Network control panel and choose the Configuration tab. If you see NetBEUI in the list, highlight it, and click the Remove button.

Remove all instances of NetBEUI from this window, and then click OK when you're done. You'll probably have to restart your PC.

[bad boy]

14 July 2008

Find Missing Remote Printers

I need to print to a printer that's physically connected to another PC on my network, but when I browse for the printer in the Add Printer Wizard, it never shows up. I also tried typing the printer's network address into the wizard without any luck, and the printer manufacturer is absolutely no help.


The traditional way to use a printer installed and shared on another PC is to open the Printers and Faxes control panel and then click Add Printer. On the "Local or Network Printer" page, choose "A network printer, or a printer attached to another computer," and on the next page, choose "Browse for a printer." Unfortunately, a variety of problems can cause the printer to be absent from this screen.

First, make sure the PC to which the printer is connected is turned on, the network is working for all PCs involved, and the printer is indeed shared. On the remote PC (the one with the printer), open the Printers and Faxes control panel. Right-click the printer you'd like to share, select
Properties, and then choose the Sharing tab. Select the "Share this printer" option, and then click OK.

If the printer is shared, and you're sure its driver supports network sharing, there's a quick workaround that usually works (although it won't solve the underlying problem, whatever that might be). Open Windows Explorer on a PC not directly connected to the printer, and click the My
Network Places folder. Open Entire Network , then Microsoft Windows Network , then your workgroup (e.g., MSHOME ), and then the PC to which the printer is attached. Inside, you'll find a Printers and Faxes folder, and inside that, you'll see all the printers shared on that PC. Right-click the printer you want to use, and select Connect.

If all goes well, the printer will show up in the Printers and Faxes dialog in 10 - 20 seconds, and you should be able to print to it immediately thereafter.

Note: Note that some printers can't be shared (this problem may come up if the manufacturer sells a more expensive "network-ready" printer that they'd rather have you buy). Review your printer's documentation and check the manufacturer's web site for driver updates if you can't get sharing to work. Typically, printers suffering from this limitation do show up in the "Browse for a printer" list but display an error when you try to install the drivers or print remotely .

[bad boy]

15 July 2008

PC Slows When Accessed over the Network

My PC slows to a crawl when someone reads a shared file on my hard disk over the network. I need to keep those shared folders active, but the performance slowdown interferes with my work. What can I do?

Although heavy network traffic can bog down a PC, it may indeed be nothing more than a hardware problem. Specifically, your network adapter may conflict with another hardware device in your system.

If you're using a desktop PC, shut down Windows, unplug the power cable, and crack open the case. Locate your network adapter the card into which you plug your network cable remove the screw, pull out the card, and pop it into a different slot. Reassemble and turn on your PC and see if the problem goes away.

If, on the other hand, your NIC is integrated on the motherboard, it probably shares an IRQ with one of the PCI slots, and thus the PCI card in that slot may be causing the problem. Remove all nonessential PCI cards from your system, and start up Windows. If the problem persists, you may have to shuffle the remaining, essential PCI cards until you resolve the problem. If, on the other hand, the problem vanishes after you remove the PCI cards, shut down your PC and reinsert the cards one by one, reassembling and restarting your system after each insertion, until you find the culprit. If the culprit is a troublesome PCI slot, cover it with a piece of masking tape to remind yourself to keep it unoccupied.
If you're still stuck, you may need to update your network drivers or even replace your network hardware.

[bad boy]

16 July 2008

Log in Automatically

I added a password to my Windows user account to protect my shared data, but now I have to type it every time I turn on my PC. Isn't there a way to skip this step?

It may seem ironic to create a password for your PC and then immediately override it with an automatic logon, but it's a perfect solution for a single-user PC on a home network. Your user account needs a password if you want to share files with other PCs on your network, particularly if you want to protect your data from intruders. But
unless those intruders routinely walk by your computer, you can forgo having to type that password every time you start Windows.

To do this, go to Start --> Run, type control userpasswords2 , and then click OK to open the alternate User Accounts window shown in Figure. (The standard User Accounts window in the Control Panel isn't sufficient for this task.)

Remove the checkmark next to the "Users must enter a user name and password to use this computer" option, and click OK. In the Automatically Log On dialog box, type your username, enter your password twice, and click OK. The next time Windows starts, you'll skip the Welcome screen and go straight to your desktop.