Configure multiple DUN connections


Q I have a question regarding Dial-Up Networking. To access my ISP I only need the TCP/IP protocol and a dial-up adapter installed. To dial into the office server (running NT 4) I need to add NetBEUI, Client for Microsoft Networks and file sharing for files and printers.

All that is fine but I don't want to have NetBEUI and file sharing enabled while dialling into my ISP because of the security issue. I have set up different users to access both, but the network changes apply across the board. Can I set up different Net profiles under HKEY_USERS in the Windows Registry so that I don't have to change the settings and restart each time I want to access the other server? Or can I run a script that would apply the changes as I log in under different usernames?

û Nigel House

A The main security issue when connecting to the Internet relates to individual applications such as Web browsers. This issue is a little different from the one you raise.

Having the Client for Microsoft Networks enabled on your computer may allow people at your ISP to browse your computer and access your files. It will not allow people on the Internet to access your computer. Rather than configure individual users to have specific network configurations, you can configure each dial-up uniquely.

There are a few things that you can do to make your dial-up connection more secure. You can disable NetBEUI and IPX/SPX for your ISPÆs dial-up connection. These protocols are automatically enabled when you set up a dial-up connection in Windows 95 and it is a good idea to turn them off if you donÆt need them. Do this by going to My ComputerûDial-Up Networking. Right-click on the connection that you want to configure. Click on the Server Types tab. Make sure that the NetBEUI and IPX/SPX Compatible checkboxes are unchecked. This will mean only TCP/IP is used for the dial-up connection and there will be no need to remove the other protocols from the Network control panel.

The next thing to do is make sure that Client for Microsoft Networks is bound only to NetBEUI or IPX/SPX. Do this by going to the Network control panel. Select the TCP/IP protocol and click the Properties button. Click on the Bindings tab and make sure that Client for Microsoft Networks and File and Print Sharing for Microsoft Networks are unchecked.

It is also worthwhile making sure that your share folders are adequately protected. You have a choice between share-level control and user-level control. If you are using share-level control you should password-protect each folder.

If you are using user-level control the usernames and passwords come from an NT domain controller which has been specified in the Network control panel. As you are not connecting to your normal domain controller, remote users cannot access your shared folders.

û Roy Chambers


Category:win95
Issue: August 1998

These Web pages are produced by Australian PC World © 1998 IDG Communications