Is this unknown object in Explorer's network area a security threat?

[stanhilliard]

Alright, good news So only W98 left? Any stray PCs?

In the Windows Explorer of computer #4 (win98), when I clicked on Win7 computer #3 it asked for a password which I couldn't get past. The result was the same when I tried [tools][map network drive]. So back in Computer #3 I set "password protected sharing" off. Then I was successful with [tools][map network drive] to map computer #4 to the \users\ folder in computer #3. The same with mapping to #2 and #1. Now all four computers are accessible from each other. Everything seems to work.

 

[GokAy]

Ok, turning off password protected sharing is not the best practice though. Now you get access to shares as Guest instead of your user account. I guess it will be alright for you if this is strictly a home network.

Did you check out the link about network sharing between W98 and W7 machines? Or did it not work even if you configured the machines?

 

[stanhilliard]

Did you check out the link about network sharing between W98 and W7 machines? Or did it not work even if you configured the machines?

I have not tried the LM method yet because I don't understand exactly how to do it. I assume I would modify only the one Win98 computer (#4), plus to set "password protected sharing" on for the other computers.

The page/post that you gave a link to contained 2 further links. The first one (LmCompatibilityLevel) I understand and can do. The second link in that post however (How to enable NTLM 2 authentication) talks about several possibilities and I don't know which applies.

It looks like I need to install "Active Directory Client Extensions" on the Win98. I'm not sure which choices to make -- as the MS article seems to cover a lot of different possibilities. Below is my peer-to-peer workgroup configuration:

1 Windows 7 Professional SP1 x64, wired
2 Windows 8.1 x64 laptop,wireless
3 Windows 7 SP1 x64 laptop, wireless
4 Windows98SE, with IE6-SP1, wired

Computers #1,2,& 3 have a user with the identical username=stan and identical passwords, and also another user with no password. Computer #4 does not have a username or password.

 

[GokAy]

It is just confusing you with the possible values of the registry key.

See post 10 - http://www.sevenforums.com/network-...re-win7-printer-win98-machine.html#post792405
The first 2 steps should be enough for you, don't forget to restart after the change. If still no go, try setting (on Windows 7 PCs) 40-56bit encryption in Network and Sharing Center - Advanced Sharing Settings - File Sharing Connections.

 

[stanhilliard]

I changed my mind again about setting up the LMCompatibility method. I'll stick with mapping from the Win98 to the \USERS\ folders of the others so that the Win98 can "see out." All four computers work together well now.

I think I will be safe in not going down the LM path because:

A) I don't think I have to worry about my computers being a threat to each other. The "password protected sharing"=off setting of the other three computers is behind the router's long difficult passphrase. All Internet access will be through the router & protected by the passphrase.

C) The only computer without Kaspersky Internet Security protection is computer 4 (Win 98) and it will not be used for internet access.

D) The laptops are set to switch to "password protected sharing"=on if I connect them to public networks -- like coffee shop, library, etc..

I wonder if my network is as risk in other ways that I am not considering?

I still get some objects on the network area of file explorer that are not mine. I will post them here soon.

I wonder if my network is as risk in other ways that I am not considering?

 

[GokAy]

Any friends using your Internet connection? They may get access as well with no passwords. Is this a security risk? I guess depends on whether your friends like to pull a trick or not

Do post screenshots when you can.

 

[stanhilliard]

I might let friends use my internet connection to access the internet to check their email with their cell phones etc. Can that get them into my network?

 

[GokAy]

There are apps that can browse the network just like any other PC.

 

[stanhilliard]

I might let friends use my internet connection to access the internet to check their email with their cell phones etc. Can that get them into my network?

There are apps that can browse the network just like any other PC.

I installed an app named Network Browser on my android phone and it got right into my network -- the cellphone previously had stored my passphrase. My wife's phone couldn't connect because it didn't have the passphrase stored.

I see now that to allow someone to use my WiFi to access the internet with their cell phone is to allow then to access my network computers -- because they will have my passphrase.

So I shouldn't do that. I should instead let them use one of my computers so they won't have my passphrase.

I find it interesting that File Explorer on my machines cannot see my phone when connected yet it shows other unknown phones and objects!

 

[GokAy]

Passphrase is to join wireless network but doesn't necessarily let anyone access your PCs. They can now because password protected sharing is off.

Some routers allow setting a guest WiFi network, which doesn't allow access to the main network. Check the wireless section of your router.

 

[stanhilliard]

Passphrase is to join wireless network but doesn't necessarily let anyone access your PCs. They can now because password protected sharing is off.

Thanks, I understand now. I will try to configure the LM method again.

I don't know if using password protected sharing will require having a username/password on Win98, but if so, the current configuration of the Win98 is that I don't have to login with a username or password. I suspect I must change that. I am concerned about what will happen to my files and configuration -- as they are at the C:\ level and not in a C:\users\ folder. Fortunately most of my work is on drive E:\ which should not be affected. Is there any special consideration about that kind of change -- in order to use the new identity in place of my current setup?

Some routers allow setting a guest WiFi network, which doesn't allow access to the main network. Check the wireless section of your router.

My R7000 router does allow setting up a guest network.

 

[GokAy]

You could just set a guest network and don't bother with password protection then. The guest network will have its own SSID and set a different password for it. You can then check it with your app while connected to guest.

 

[stanhilliard]

You could just set a guest network and don't bother with password protection then. The guest network will have its own SSID and set a different password for it. You can then check it with your app while connected to guest.

Thanks, I will do that.

I assume that the guest SSID will allow friends to access the Internet also.

 

[GokAy]

It is supposed to, yes.

 

[stanhilliard]

The guest SSID is successful. It puts out its own separate connection name and connects only to the internet and not to my network. I gave it a simple password. Guests can connect to it and be on the Internet by cell phone - it works well.

GokAy - I appreciate your guidance.

 

[GokAy]

Anytime

 

[stanhilliard]

For the record, I can see the cell phone on the router's "attached devices" window -- both when connected as guest or connected into the network.

But my phone doesn't appear on File Explorers of the computers, even though the various unknown objects (phones, cameras, routers ) still do.