启用或禁用文件和打印机共享例外

启用或禁用文件和打印机共享例外

1. 打开“Windows 防火墙”。
   
2. 单击“例外”选项卡。
   
   要启用文件和打印机共享例外，请在“程序和服务”中，选择“文件和打印机共享”复选框，然后单击“确定”。
   
   要禁用文件和打印机共享例外，请在“程序和服务”中，清除“文件和打印机共享”复选框，然后单击“确定”。
   

注意

• To perform this procedure, you must be a member of the Administrators group on the local computer, or you must have been delegated the appropriate authority. If the computer is joined to a domain, members of the Domain Admins group might be able to perform this procedure.
  
• To start Windows Firewall, click Start, point to Control Panel, and then click Windows Firewall.
  
• You can also use the netsh command with the firewall context to perform this procedure and configure other Windows Firewall settings.
  
• You can also use Group Policy settings to perform this procedure and configure other Windows Firewall settings.
  
• You can configure Windows Firewall settings in the standard profile or the domain profile. The domain profile is used when a computer is connected to a network in which the computer's domain account resides. The standard profile is used when a computer is connected to a network in which the computer's domain account does not reside, such as a public network or the Internet. Make sure Windows Firewall is using the correct profile when you perform this procedure.
  
• If a Windows Firewall setting appears dimmed in the graphical user interface, and on the General tab, you see For your security, some settings are controlled by Group Policy, the setting might be managed by Group Policy. If all Windows Firewall settings appear dimmed, and on the General tab, you see You must be a computer administrator to change these settings, you do not have administrative rights to configure Windows Firewall.
  
• On Windows Server 2003, Windows Firewall is turned off by default and the Windows Firewall/Internet Connection Sharing service is disabled by default. You might have to start the Windows Firewall/Internet Connection Sharing service if you try to perform this procedure and you have never started Windows Firewall.
  
• Windows Firewall is not included in the original release of the Windows Server 2003 operating systems.
  
• 文件和打印机共享例外允许非请求传入通信通过 TCP 端口 139 和 445 以及 UDP 端口 137 和 138。
  
• 如果启用文件和打印机共享例外，也就允许传入 Internet 控制消息协议 (ICMP) 响应通信，这会使计算机能够 Ping 您的计算机。要阻止传入 ICMP 响应通信，必须编辑文件和打印机例外，以禁用 TCP 端口 445。
  
• 编辑或禁用文件和打印机共享例外可阻止其他计算机访问您的共享文件夹、文件和打印机。务必测试这些更改对文件和打印机共享功能可能造成的影响。
  
• 应该为启用的任何例外配置作用域选项。
  
• 启用文件夹和打印机例外将允许其他计算机使用 ping 命令访问您的计算机。