Print Server Security (Windows CE 5.0)

Send Feedback

A print server has potential security risks because it supports the transfer of unencrypted, clear-text files over a network. Running a print server device on a public network may expose the device to the typical security concerns associated with networking. The print server is not designed to be run on a public network, and Microsoft strongly recommends that you use this server only on a private network.

Best Practices

Enable a firewall on your network device

For enterprise environments, Microsoft recommends the use of a network firewall with intrusion protection, such as Microsoft Internet Security and Acceleration (ISA) Server. For more information, visit this Microsoft Web site.

For non-enterprise environments or for added protection, Microsoft recommends that you include and configure the Windows CE Firewall on the network device. For more information about the Windows CE IP Firewall and how to configure it, see Firewall.

For information about configuring the IP firewall to properly manage traffic destined for the internal network, see IP Firewall Reference.

Use authentication

Use NTLM version 2 authentication to limit access to known users only.

For information about NTLM, see NTLM Security Support Provider.

Default Registry Settings

You should be aware of the registry settings that impact security. If a value has security implications you will find a Security Note in the registry settings documentation.

For Print Server registry information, see Print Server Registry Settings.

Ports

The following table shows the ports that the File Server and Print Server listen to.

Port number Description
137 TCP/ UDP (name service)
138 UDP (for communication through a mailslot)
139 NetBIOS over TCP/IP (NetBT)
445 TCP

See Also

Print Server | Print Server Registry Settings | Enhancing the Security of a Device

Send Feedback on this topic to the authors

Feedback FAQs

© 2006 Microsoft Corporation. All rights reserved.