Re: Tech Tip: This is how You Disable Dcom & close Down Port 135

Allan

Good article you posted from Symantec desecribing the simple method of
disabling Netbios.

"you cannot disable the NetBios service; it is still needed for connectivity
for some reason." - One reason for not entirely disabling Netbios is because
the DHCP service depends on Netbios to function. You would run in to probelms
renewing your ip address

If you had a static IP issued to you by your ISP. Then manually entering
IP,Subnet Netmask,Gateway,DNS Servers -Primary and Secondary into the TCP/IP
properties you could entirely disable NETbios...thats if your not file
sharing with other computers in your lan or using UNC/ named pipes to access
computers by there name.

IF you have a Static IP and no need for sharing... The method for entirely
disabling NEtbios would be as follows

*******Create A System Restore PointBefore Any configurations *********

Open you LAN Connection..click properties.. uninstall file and printer
sharing client

then click TCP/IP properties

1) Enter static IP, Subnet Netmask, Gateway, DNS Prim & Secondary in to the
TCP/IP property page from LAN connection.

2) Start > Control Panel > Double CLick System Icon ..this will open System
properties... then click the Hardware Tab and select Device Manager

3) In Device Manager ..Go to pull down View menu and select Show Hidden
Devices

4) Expand the Non Plug & Play Driver tree

5) Double Click Netbios over Tcpip

6) Click the Driver tab at the top of properties page

7) Change Startup Type from System to Disabled then click ok

8) Right click on Netbios over tcpip and select disable

9) Since you have entered a static IP and all other server info you can go
to services and disable the DHCP client Service

10 ) Restart computer

This method should close 137-139

If you use this method it does work. End result WILL Close & disable Netbios
ports. Thats if you are interested in total closure of those ports.




.

Relevant Pages

  • Re: netbios over TCP/IP
    ... remember reading somewhere that another service was related to it (maybe ... computer I would recommend just disabling netbios in the wins properties for ... service) to see port 445 disappear. ... but disabling the server service or unistalling file and print sharing ...
    (microsoft.public.win2000.security)
  • Re: user list
    ... I have never tried disabling netbios over tcp/ip that way. ... Exchange, which may be complicating your ability to harden the server. ...
    (microsoft.public.win2000.security)
  • Re: Demand-dial VPN interfaces configuration
    ... Registering them in DNS doesn't serve any useful purpose, ... Disabling Netbios over TCP/IP requires a registry change. ...
    (microsoft.public.windows.server.networking)
  • Re: NBT vs SMB - security?
    ... Well, if you need Windows file sharing, then you'll have to use either one. ... Disabling NetBIOS is a better option - the code is too mature:) ... However the web server needs to be able to access ...
    (microsoft.public.windows.server.security)
  • Re: Cant uninstall Ethernet
    ... Disabling it will still leave the icon (as disabled in device manager), ... If I select Uninstall, that gives me some action ... ... before I enabled the Ethernet, and during that time I had no communication ... find anything in the manual regarding the disabling of Ethernet or the ...
    (microsoft.public.win2000.networking)