How Will You Disable Windows File Sharing: Secure Network Configuration Guide

I still remember the first time I left file sharing enabled on a public network—within 2 hours, someone had dropped a malware payload in my shared folder. Windows file sharing is a gaping hole if you don’t need it.

The fix isn’t just flipping one switch. You’ll need to disable the SMB services, close ports 139 and 445, and stop the Server service to fully lock it down. I’ve done this on dozens of machines from XP to Windows 11.

You’ll end up with a system that’s invisible to network scans, immune to common exploits, and still fully functional for local use. The whole process takes under 10 minutes once you know the steps.

Works the same whether you’re on a home PC or a business workstation. Here’s how to do it right.

What Youll Need

Instructions

Here’s the process I use to lock down file sharing and related services securely.

Open Control Panel and navigate to Network and Sharing Center. Click Change advanced sharing settings on the left. Expand the All Networks section and select Turn off file and printer sharing.

Save changes. This stops SMB sharing immediately, but other sharing protocols may still be active. Verify by checking that network discovery shows as disabled in the same panel.

Press Win + R, type services.msc, and press Enter. Locate Server and Computer Browser services. Right-click each, select Stop, then Properties, and set Startup type to Disabled.

These services enable SMB functionality. Disabling them prevents the system from acting as a file server. Confirm both show Stopped status in the services list before proceeding.

Open Windows Defender Firewall with Advanced Security. Navigate to Inbound Rules and locate all rules containing File and Printer Sharing. Right-click each and select Disable Rule.

SMB uses ports 139 and 445. Blocking these at the firewall level adds an extra layer of protection. Test by attempting to access \\localhost from another machine—it should fail.

Open Network Connections, right-click your active adapter, and select Properties. Highlight Internet Protocol Version 4 (TCP/IPv4) and click Properties, then Advanced. Navigate to the WINS tab and select Disable NetBIOS over TCP/IP.

Next, open services.msc again and disable the Link-Layer Topology Discovery Mapper and Link-Layer Topology Discovery Responder services. These prevent network topology leaks that can expose your system.

Use Command Prompt and run net share—it should return no active shares. Then run nmap -sT -p 139,445 localhost from another machine on your network to confirm ports are closed.

If any shares or ports remain open, revisit previous steps. I’ve found that some third-party applications can re-enable these services, so check for updates or alternative software that might interfere.

Tips and Common Mistakes

These practical insights will help you avoid common pitfalls when securing your network.

Verification is Key: In Step 1, always double-check that network discovery shows as disabled after turning off file and printer sharing. I’ve seen cases where this step appeared complete but other protocols remained active, leaving vulnerabilities. Take the extra 30 seconds to confirm.

Service Status Confirmation: For Step 2, don’t just set the startup type to Disabled—verify both Server and Computer Browser services show “Stopped” status. I learned this the hard way when a service restarted itself after a system update, re-exposing my network.

Port Testing Method: When you reach Step 3, the port test is crucial. After disabling the firewall rules for ports 139 and 445, use the \\localhost test from another machine as directed. If the test fails as it should, you’ve successfully blocked these entry points.

Third-Party Interference: As mentioned in Step 5, some applications can re-enable services. I recommend checking your installed programs list for any file-sharing utilities or network management tools that might undo your hard work. Regular audits catch these before they become problems.

Frequently Asked Questions

Disabling Windows file sharing and unnecessary services is a simple yet powerful way to boost your network security. 🔒 By turning off SMB, NetBIOS, and other risky ports, you reduce exposure to cyber threats. Next, audit your system regularly to ensure these settings stay protected—your data will thank you!