45

I have one Windows 10 computer on a local network.

When I try to ping the Windows 10 machine from some other computer, it fails (Request timed out). From the Windows 10 machine, I can ping other devices with no problems.

I found out that if I go in Control Panel to the "Advanced sharing settings" and I turn on "File and printer sharing," the ping to this machine works normally.

My question is, WHY?

Why doesn't the ping work if "File and printer sharing" is turned off (on the pinged machine)? How is that related to the ping reply? A machine should still reply to a ping even if it does not share file/printer resources, or did I miss something?

7 Answers 7

57

Because the File and printer sharing settings include the ability to deny/allow ICMP traffic. You can actually see this by navigating to the following:

  1. Click the Start button
  2. Search for Windows Firewall
  3. Select Advanced Settings on the left
  4. In the left pane select Inbound Rules
  5. In the right pane look for the rules titled File and Printer Sharing (Echo Request - ICMPv4-In)

(Source)

You can see an example from my laptop (with File and printer sharing turned on) directly below:

Windows Firewall

Taking it a step further, if you want to leave File and printer sharing off but still allow "pings," you can enable the appropriate rules shown within the red box in the picture.

9
  • tnx! so basically, in windows, ICMPv4-In is directly connected with "file and printer sharing"? I cannot allow ICMPv4-In without "file and printer sharing" ?
    – lucidBug
    Oct 22, 2016 at 23:36
  • *without turning ON "file and printer sharing"
    – lucidBug
    Oct 22, 2016 at 23:38
  • 1
    Settings that control ICMP traffic are included within the File and printer sharing functionality, but as I mentioned at the end of my answer, you should be able to individually enable the appropriate rules within Windows Firewall to allow ICMP traffic.
    – Run5k
    Oct 22, 2016 at 23:40
  • But if I enable the rule (the one in the red box), then this is same like I put ON "file and printer sharing"? or not?
    – lucidBug
    Oct 22, 2016 at 23:44
  • 1
    one more thing. In linux the machine can be automatically, pinged. Why in Windows, the echo reply, is tied with "file and sharing"? Is there a reason why they did it in this way? Cause lof of people have the sharing thing turned off... and maybe not everyone knows that this thing is tied with echo reply.
    – lucidBug
    Oct 22, 2016 at 23:59
18

I had issues ping-ing a Windows 10 VM, even if I turned on the file and printer sharing rule.

So I added the following:

netsh advfirewall firewall add rule name="ping" protocol=ICMPV4 dir=in action=allow

Warning: this command will apply the rule to the Private, Public, and Domain network profiles.

3
  • I think by default the file and printer sharing rules allow ICMP from the local subnet only thus if your VMs are in a NAT - you will need another rule.
    – rkantos
    May 25, 2021 at 1:55
  • 1
    This solved ping requests for my Windows 11, which didn't work before even if already enabled as per the accepted response. Oct 1, 2022 at 0:48
  • Powershell command, New-NetFirewallRule -DisplayName "Allow-ping" -Protocol icmpv4 Mar 9, 2023 at 11:09
4

"File and Printer Sharing" are a group of firewall rules, some of which also enable answering to the incoming ICMP echo requests sent by ping.

However, to enable ping only, you could also enable another pre-configured group of rules named "Core Networking Diagnostics".

These can all be enabled on the command-line, using netsh. The commands are quite cumbersome, but can be easily copy/pasted to re-use on other machines.

So, to enable ping only, enable the "Core Networking Diagnostics" group:

netsh advfirewall firewall set rule group="Core Networking Diagnostics" new enable=yes

To enable "File and Printer Sharing", which will also enable ping:

netsh advfirewall firewall set rule group="File and Printer Sharing" new enable=yes

And to list all pre-configured inbound rules into a "firewall.txt" file in your user directory :

netsh advfirewall firewall show rule name=all dir=in > $HOME\firewall.txt
1

Often the issue can be fixed by moving your interface from PUBLIC to PRIVATE.

Windows assigns (or asks you to assign) network interfaces to either the PUBLIC or PRIVATE network profile. The firewall in windows is configured to allow pings from devices connecting via interfaces in the PRIVATE profile, but not from devices connecting via interfaces in the PUBLIC profile.

You can change the firewall configuration, but it may be easier to move your network interface (LAN, WIFI, etc) from PUBLIC to PRIVATE. This should do the trick.

As an example, for a WIFI interface, click on the wifi icon in the task bar and select the WIFI and properties. Then change the network profile from PUBLIC to PRIVATE.

1

I know I am EXTREMELY late with my response to this but this is one of the pages that I was referred to when trying to resolve a similar issue. I was trying to upload files to a Windows 10 Home computer and if the firewall was ON, I was not able to upload files OR ping the remote Home computer. Everything worked fine if I turned off the firewall. With Windows 10 Home the Guest and a lot of the ability to remotely access Home is turned off by default. Even turning on File and Printer Sharing did not fix MY problem.

The Question asked here is "Why doesn't the ping work if "File and printer sharing" is turned off (on the pinged machine)? How is that related to the ping reply?"

They are linked together under the rules for ICMP. In my case I had to create a Custom Rule that allowed ICMPv4 for Ping and another custom rule that allowed ICMPv6 for Ping. Once I allowed a response to Ping using the custom firewall rule, the Home computer allowed me to access the shared folders and upload files.

Hope this helps anyone else with this problem.

0

Private and public network setups matter. Try different configurations. I made my vuln private. And also made my other setup a nat net

1
  • 1
    Your answer could be improved with additional supporting information. Please edit to add further details, such as citations or documentation, so that others can confirm that your answer is correct. You can find more information on how to write good answers in the help center.
    – Community Bot
    Jun 3, 2023 at 23:20
-1

Windows uses firewall presets, depending on your network type: Public, Private or Domain. Default is Public. In the Public preset, the firewall is set "tighter"; It blocks more, e.g. ping requests. If you turn on File and printer sharing, Windows will change your network type (= firewall preset) to Private. The firewall will be more open, allowing ping requests.

1
  • 1
    In my case, the network I am connected to is marked as private and yet Windows does not allow pings unless file and printer sharing is enabled. So, the network classification (i.e. private, public, etc.) and ping availability are not directly tied together. Jul 29, 2020 at 10:28

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .