Delete multiple workgroup in my network places

17 Oct 2006 6:45 PM

Les

Hello,

I'm not sure on how to delete multiple workgroup under my network places.
I'm not sure how it got there...but there is no one in my network that
connected to the domain or used domain resources. It has like 12 other
workgroup with my network being one of them. Is this worrysome? Please
advise.

Les

17 Oct 2006 7:33 PM

Chuck

On Tue, 17 Oct 2006 11:45:01 -0700, Les <L**@discussions.microsoft.com> wrote:

>Hello,
>
>I'm not sure on how to delete multiple workgroup under my network places.
>I'm not sure how it got there...but there is no one in my network that
>connected to the domain or used domain resources. It has like 12 other
>workgroup with my network being one of them. Is this worrysome? Please
>advise.
>
>Les

Les,

If you see entries in My Network Places, and they represent active computers
that you don't know about, connected to your network, then you should find out
why they are on your network.

If they are computers that you know about, that you simply aren't connected to
for some reason, then they aren't something to worry about. If they are
shortcuts that you added, you can delete them. If not, they will go away on
their own.

If this is somebody else's network, then you should make sure that your computer
is properly protected, and not worry about the other networks.
<http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html>
http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.

17 Oct 2006 7:50 PM

Les

thank you chuck..

but i was talking more about the workgroup that is not connected to our LAN
but is there....is there a possibility that we have a remote user that
connects via VPN and in not registred to our domain. Can the workgroup from
his computer attach to our my network places eventhough those workgroup can't
access our resources.

By running the scan it seems our network is secure but can't understand
where are this workgroup coming from.

thanks,
les

Show quoteHide quote

"Chuck" wrote:

> On Tue, 17 Oct 2006 11:45:01 -0700, Les <L**@discussions.microsoft.com> wrote:
>
> >Hello,
> >
> >I'm not sure on how to delete multiple workgroup under my network places.
> >I'm not sure how it got there...but there is no one in my network that
> >connected to the domain or used domain resources. It has like 12 other
> >workgroup with my network being one of them. Is this worrysome? Please
> >advise.
> >
> >Les
>
> Les,
>
> If you see entries in My Network Places, and they represent active computers
> that you don't know about, connected to your network, then you should find out
> why they are on your network.
>
> If they are computers that you know about, that you simply aren't connected to
> for some reason, then they aren't something to worry about. If they are
> shortcuts that you added, you can delete them. If not, they will go away on
> their own.
>
> If this is somebody else's network, then you should make sure that your computer
> is properly protected, and not worry about the other networks.
> <http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html>
> http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html
>
> --
> Cheers,
> Chuck, MS-MVP [Windows - Networking]
> http://nitecruzr.blogspot.com/
> Paranoia is not a problem, when it's a normal response from experience.
> My email is AT DOT
> actual address pchuck mvps org.
>

17 Oct 2006 8:53 PM

Richard G. Harper

Any time an outside computer connects to your network you will likely see
"outside" workgroups, domains, etc. that the other computer knows about and
has passed along to your workgroup or domain. There is no danger in this,
no security risk, and the entries will almost surely go away soon.

The only thing you need to be worried about is whether this single user is
the only reason you're getting "outside" workgroups and domains - it would
be highly unusual for a single computer to cause multiple new workgroup and
domain entries.

--
Richard G. Harper [MVP Shell/User] rghar***@gmail.com
* PLEASE post all messages and replies in the newsgroups
* for the benefit of all. Private mail is usually not replied to.
* My website, such as it is ... http://rgharper.mvps.org/
* HELP us help YOU ... http://www.dts-l.org/goodpost.htm

Show quoteHide quote

"Les" <L**@discussions.microsoft.com> wrote in message
news:42DF6881-F499-4A6E-87FE-F36F3EF78D56@microsoft.com...
> thank you chuck..
>
> but i was talking more about the workgroup that is not connected to our
> LAN
> but is there....is there a possibility that we have a remote user that
> connects via VPN and in not registred to our domain. Can the workgroup
> from
> his computer attach to our my network places eventhough those workgroup
> can't
> access our resources.
>
> By running the scan it seems our network is secure but can't understand
> where are this workgroup coming from.

18 Oct 2006 12:23 AM

Chuck

On Tue, 17 Oct 2006 12:50:02 -0700, Les <L**@discussions.microsoft.com> wrote:

Show quoteHide quote

>"Chuck" wrote:
>
>> On Tue, 17 Oct 2006 11:45:01 -0700, Les <L**@discussions.microsoft.com> wrote:
>>
>> >Hello,
>> >
>> >I'm not sure on how to delete multiple workgroup under my network places.
>> >I'm not sure how it got there...but there is no one in my network that
>> >connected to the domain or used domain resources. It has like 12 other
>> >workgroup with my network being one of them. Is this worrysome? Please
>> >advise.
>> >
>> >Les
>>
>> Les,
>>
>> If you see entries in My Network Places, and they represent active computers
>> that you don't know about, connected to your network, then you should find out
>> why they are on your network.
>>
>> If they are computers that you know about, that you simply aren't connected to
>> for some reason, then they aren't something to worry about. If they are
>> shortcuts that you added, you can delete them. If not, they will go away on
>> their own.
>>
>> If this is somebody else's network, then you should make sure that your computer
>> is properly protected, and not worry about the other networks.
>> <http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html>
>> http://nitecruzr.blogspot.com/2005/05/please-protect-yourself-layer-your.html

>thank you chuck..
>
>but i was talking more about the workgroup that is not connected to our LAN
>but is there....is there a possibility that we have a remote user that
>connects via VPN and in not registred to our domain. Can the workgroup from
>his computer attach to our my network places eventhough those workgroup can't
>access our resources.
>
>By running the scan it seems our network is secure but can't understand
>where are this workgroup coming from.
>
>thanks,
>les

Les,

I'd suspect one of two scenarios.
1) Somebody connecting from home, thru a VPN, to share files.
2) A guest in your office, connecting a laptop locally, to use the printer or
share files.

If you're describing multiple unknowns, this will most likely be multiple
people. If you have a VPN server, and allow incoming connections, then any
computers remotely connected thru a VPN will create these entries in MNP. Every
computer is a workgroup member, and every computer connecting remotely will
possibly be a member of a different workgroup, and leave another entry in MNP.

Whether or not they represent folks with access to your network data is an issue
that you may need to explore. The fact that they left their workgroup names
behind in MNP is NOT an indication that they did have access to anything, just
that they might have had access. Browser packets, broadcast on the LAN, don't
require access to any servers.

--
Cheers,
Chuck, MS-MVP [Windows - Networking]
http://nitecruzr.blogspot.com/
Paranoia is not a problem, when it's a normal response from experience.
My email is AT DOT
actual address pchuck mvps org.