Creating an illegal Workgroup on my computer

[Sally C]

I'm hoping somebody can help me. I discovered not long ago that I had a Workgroup installed on my laptop. This was without my permission. I recently had my laptop restored to the factory settings and I have just discovered that this Workgroup has been set up yet again. I found out about this by going into Events Viewer. I am an older lady and am not working nor part of any organisation and I'm finding this very frightening. Is there anything Microsoft can do to prevent this from happening? Also do these people have to have access to my laptop to install this, or can it be don remotely? Please help

 

[Solaris17]

“Workgroup” is the default workgroup on every windows installation. Nothing to worry about.

 

[dorsetknob]

“Workgroup” is the default workgroup on every windows installation. Nothing to worry about.

Windows Creates this Workgroup as part of the Network setup (you can rename it if you like ).

 

[R-T-B]

Yeah, this does not imply or commit you to anything. That's just how Microsoft PCs identify themselves to other PCs on networks. It's normal.

 

[Bill_Bright]

One thing Workgroup helps home users do is configure their computers in the same home and on their same "local" network to share files. It is not illegal or malicious. As the others have said, it is not something you need to worry about.

That said, since you were unsure, you were wise to ask about it!

 

[MentalAcetylide]

One thing Workgroup helps home users do is configure their computers in the same home and on their same "local" network to share files. It is not illegal or malicious. As the others have said, it is not something you need to worry about.

That said, since you were unsure, you were wise to ask about it!

Yup, the only stupid question is the one never asked. Not all of us are tech savvy knowing the ins & outs of computers and operating systems.

 

[Mussels]

I think others covered it well - it's normal, to allow file and printer sharing.

Worth asking, since you had concerns.

 

[Sally C]

Thanks everyone for your help with all this. My major concern is that when I go on to netstat I always see IP addressess that are logged on at the same time as me. I live on my own so there are no other people who need to configure their computers on the same local network. Any help with this would be greatly appreciated

 

[Solaris17]

Thanks everyone for your help with all this. My major concern is that when I go on to netstat I always see IP addressess that are logged on at the same time as me. I live on my own so there are no other people who need to configure their computers on the same local network. Any help with this would be greatly appreciated

net stat is just that, statistics. If your machine is online you will have a multitude of external IPs connected to the system, from websites, apps, and services. All of which is completely normal. Not all of them will be obvious on the foreground IE: Using a web browser. Some will be background connections for updates or email syncing etc.

 

[Sally C]

Thanks for your help. The other thing though is that when I go on to Event Viewer and Systems there is always an error message that comes up saying that there is a conflict with an IP address (which isn't mine) and my MAC address. Is this anything to worry about?

 

[Solaris17]

Thanks for your help. The other thing though is that when I go on to Event Viewer and Systems there is always an error message that comes up saying that there is a conflict with an IP address (which isn't mine) and my MAC address. Is this anything to worry about?

Thats a more complex situation that would depend entirely on exactly what the error message says and what your network is like, That is out of scope for this thread, but given that you are online I would say its nothing to worry about at the moment. Generally conflicts like this are lease overlaps and the devices themselves correct it automatically.

 

[68Olds]

Here's some other things in your home that may be on your network...
TV, TiVo, Roku, fire stick, cable box, dvd/br player, Ring doorbell.
Your cell phone, tablet or kindle type reader.
There are so many things connected these days it is easy to forget one or more of them.

 

[hckngrtfakt]

For added piece of mind get yourself a firewall. Google “tinywall” and install away.

 

[DeathtoGnomes]

There is one setting you can turn off that will help with you security including Workgroups, and can be turned on if you need to connect to customer service.

Disabling Remote Access will stop other computers from connecting to your computer. This is not the same computers connected to your home network.

1. Press Windows + R keys from the Keyboard.
2. Type Control Panel and hit Enter
3. Click on System and Security
4. Click on Allow Remote access
5. On the next screen, select Don’t Allow Remote connections to this computer option.
6. Click on Apply and OK to save this setting on your computer.

Use this same procedure to turn Remote Access back on if or when you have to call in for service.

Remember, legitimate Customer Service will never call you, or ask for access to your computer, even when they say, "Hello, This is <name> from Microsoft..."

 

[Mussels]

Thanks for your help. The other thing though is that when I go on to Event Viewer and Systems there is always an error message that comes up saying that there is a conflict with an IP address (which isn't mine) and my MAC address. Is this anything to worry about?

That might imply you have 'internet connection' (ICS) sharing active, or perhaps a second router connected on your network

This isn't a sign of anything nefarious or criminal, but it's a sign there's a second 'router' (DHCP server) trying to give out IP addresses, that another DHCP server already has

Since your MAC address was listed, it makes me think ICS might be enabled, which is a windows feature to get internet in via one connection (wired/wifi) and share it out the other - but if you connect back to the same network, things get confused.


Local IP addresses cannot be remotely hacked or altered, and theres no privacy issues since many houses use the same ranges of 192.168.x.x or 10.0.x.x (amongst others) so it's safe to post those details here - feel free to blank out letters in, or not post MAC addresses (Again, because they're local devices no one can possibly use that information for anything bad - only your modems MAC address, and even that's not going to be super useful to someone doing shady things)

 

[Bill_Bright]

If you enter your router's admin menu, there should be a menu option to view "connected" or "attached" devices. These will be all the devices connected to your network. You should be able to match them to ensure only those you authorize are attached. Just remember these may include your cell phone (if wifi is supported and enabled). It may also include other "smart" devices in your home, such as tablets, DVD players, Roku streamer, even smart TVs.

To enter the admin menu, you enter the router's IP address in your browser. This normally is something like 192.168.1.1. You will then need the proper username (typically just "admin") and router's password. Hopefully, you changed that from the default to something hard to guess.

As a reminder, the password is different from passphrase. The password gets you access to the admin menu. The passphrase is for wireless access only - for your authorized wireless devices.

If there still is a device you cannot identify, change your wifi passphrase. This will require you reauthenticate all your authorized devices, but this will ensure no others are attached via wifi - such as a nearby wizkid neighbor who figured out your old passphrase was your beloved puppy-dawg's name.

That leaves Ethernet (wired) connections. The good thing about identifying Ethernet connections is they require a Ethernet cable be physically attached to your network. So you can simply look on the back of your router and verify only authorized cables are attached.

Now for a little background. Most home networks have a wireless router and a modem - that is two devices. Or they have a "residential gateway" device - as in one device.

A wireless router is an integrated device that includes a router, a 4-port Ethernet switch (for wired computers), and the WAP (wireless access point - for your wireless devices).

A modem is the device that connects you to your ISP. If you have a wireless router and a modem, there will be 1 interconnecting cable between the two. And there will be one cable from your ISP that connects your local network to the Internet via your ISP. And power cables.

Your wired computer (if using Ethernet and not wireless) will be plugged into a Ethernet port on the back of the router and the other end of the cable into the network adapter in your computer. You should not see any extra cables attached to your router (except power).

More recently, ISPs have been providing "residential gateway" devices. This is one device that integrates the wireless router with the modem. If this is what you have, the only cables connected should be the one from your ISP and any Ethernet connected computers (and the power cable). Because the router and modem are already integrated into one box, there will be no interconnecting cables.

Clear as mud, huh?

 

[Mussels]

Nirsoft have some outdated looking but user friendly products - this one should work fine to identify what's on your network (download is at the very bottom, right above the list of alternate languages)
This doesn't actually need your PC to be on wireless to work, it shows all network devices regardless
Wireless Network Watcher - Show who is connected to your wireless network (nirsoft.net)

You can shrink the MAC address field for privacy concerns, IP addresses here are private ones - no harm can come from sharing them

I have 23 devices on my network, and this gives a lot of clues as to what company made them - google smart speakers/chromecasts, nintendo switches, phillips hue lights etc.


You can find out unknown devices by powering things off at the wall and seeing if they stop being detected, a lot of devices use wifi now (printers, smart lights, even my vacuum cleaner of all things)

 

[Sally C]

Thank you for all your help, greatly appreciated