Block windows messenger file transfers.

  • Thread starter Thread starter Jeff McClellan
  • Start date Start date
J

Jeff McClellan

I would like to allow my users to use Windows Messenger. However, I would
like to disable the file transfer feature using a group policy. Any ideas
on how to accomplish this?

User all have XP. Server Win 2000 using AD.

Thanks

Jeff McClellan
 
I am not aware of a policy setting that will prevent users from using the
file transfer service however transfers can be prevented by blocking ports.
The information from the help file lists that ports that IM uses to transfer
files.

To configure your network for instant messaging and file transfer

Note: This information is for network administrators and those who
understand how to configure computer systems that have firewalls or network
address translators (NATs).

If Windows Messenger cannot make a direct connection to the Internet from
computers or networks that are behind firewalls or NATs, it will attempt to
connect using the same connection settings that your default Internet
browser uses. If Windows Messenger connects in this way, its features are
limited to sending instant messages and seeing which contacts are online.

For greater performance and full feature availability-including being able
to transfer files by using Windows Messenger-you might be able to configure
your proxy servers in a way that allows your network or computer to connect
directly to the .NET Messenger Service servers.

For instant messaging

1.. Set outgoing Transmission Control Protocol (TCP) connections to port
1863 on your proxy servers.
2.. On the main window, click the Tools menu, click Options, and then
click the Connection tab.
3.. Note the information that is required on this tab.
4.. Provide all network users with the information and instructions they
need to properly configure the Connection tab of their Windows Messenger
program.
5.. Make sure the internal local area network has access to the Domain
Name System (DNS) servers to resolve the names of external hosts such as
messenger.microsoft.com.
For file transfer

1.. Open as many TCP ports as you can between 6891 and 6900.
2.. Configure the TCP ports so that sockets on a port remain open for an
extended period of time.
Note

If you are using a NAT, file transfer will not work unless you have a
Universal Plug and Play NAT (UPnP NAT). If you are not sure what type of NAT
you have, check with your computer manufacturer or NAT vendor. Make sure
that your NAT is updated to the latest version and that it is
UPnP-compliant.

Related Topics

Configure your network for voice communications

Connect from behind a firewall


--
Tim Hines, MCSE, MCSA
Windows 2000 Directory Services

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.
 
Back
Top