I am trying to turn off any kind of file/printer/resource sharing on
Windows XP Pro SP3. First, I must admit that this is XPM virtual
machine, but I got limited (though helpful) information at the technet
forums *and* I believe that much of what I want to turn off is XP-
specific rather than requiring knowledge of the virtual machine nature
of XPM.

The computer will be the only one in a home situation, and will access
the internet through a combination DSL modem router. The computer
will connect to the modem router through either LAN cable or WiFi. So
I don’t really need any sharing, network resource discovery, remote
diagnostic, etc..

Here is what I’ve done after much reading on the internet. Your
comments on whether it’s enough, too much so as to interfere with
normal operation, and some of the questions about what encountered in
applying the settings would be very much appreciated.

•WindowsExplorer-Tools-FolderOptions-View-AutoSearchForFile/
PrinterSearch (disable this, Windows Explorer was on the C-drive)

•Using Network Setup Wizard, specify that I connect directly to the
internet (no local network). It asks for a WorkGroup name ?? I
cancelled it cuz I don't want to create a network (not sure what the
implications are for security/sharing)

•Disabled LAN Properties "Client for M$ Networks" and "File and
Printer Sharing for Microsoft Networks".

•Changed Workstation service from Automatic to Disabled

•Disabled Guest account

•Disabled Simple File Sharing (Windows Explorer was on the C-drive)

•Windows Firewall Exceptions: (1) Should Network Diagnostics be
checked if I only use my DSL router/modem to connect to the outside
rather than with local computers? (2) Same with Remote Assistance?

•Properties for C-drive: Sharing tab shows “Share this folder”
selected – should it be? When I click on Permissions, I get “This has
been shared for administrative purposes. The permissions cannot be
set.”

•C-drive contains 4 folders: “Documents and Settings”, “I386”,
“Program Files”, “WINDOWS”. Only the WINDOWS properties show it as
being shared – why should it be shared?

•Following http://support.microsoft.com/?kbid=304040 I tried to apply
“Level 1” access to shares and files. However, the Sharing tab for My
Documents doesn’t have a switch to “Make this Folder Private”. How to
execute this?

•Why is it applied only to My Documents? Can’t a user create folders
above My Documents in the folder tree? And wouldn’t you want to
protect non-user folders high up in the folder tree?

Thanks.