Correct Security Configuration for Mac Access to File Server

Correct Security Configuration for Mac Access to File Server

Secure Home | Search | About
 Microsoft Applications Security    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
Correct Security Configuration for Mac Access to File Server Charlie 03-03-2006
Posted by =?Utf-8?B?Q2hhcmxpZQ==?= on March 3, 2006, 12:06 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi -

Sorry about the cross posting, but I realized later that it probably belongs
in this NG

I have a W2K3, R2 server which I recently set up as a file and print server.
I ran the Security Configuration Wizard, then successfully tested all access
that I thought would be needed. I later realized that one or two Mac users
will need to access files on the server.

Can someone tell me the correct security configuration for Macs to be able
to access the shares?

I'm guessing that I may need to change the setting for SMB signing and/or
something similar.

Keep in mind that this is for SMB, not AFP, so I don't need to install
Services for Mac.

Thanks


Posted by Malke on March 3, 2006, 2:31 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Charlie wrote:

> Hi -
>
> Sorry about the cross posting, but I realized later that it probably
> belongs in this NG
>
> I have a W2K3, R2 server which I recently set up as a file and print
> server. I ran the Security Configuration Wizard, then successfully
> tested all access that I thought would be needed. I later realized
> that one or two Mac users will need to access files on the server.
>
> Can someone tell me the correct security configuration for Macs to be
> able to access the shares?
>
> I'm guessing that I may need to change the setting for SMB signing
> and/or something similar.
>
> Keep in mind that this is for SMB, not AFP, so I don't need to install
> Services for Mac.
>
> Thanks

IIRC, you don't need to change anything on your server unless you've got
a firewall on the lan side on the server (not likely, but I mention
it). You'll be running Samba on the Macs, of course. IIRC, you need to
open ports 137-139, TCP/UDP for Samba.

I did a Google for "Mac PC file sharing" and got a lot of really good
links. Using the search term "OSX Windows networking" looks even more
promising and I think I'd start with that search.

Malke
--
Elephant Boy Computers
www.elephantboycomputers.com
"Don't Panic!"
MS-MVP Windows - Shell/User

Posted by Kenxl Zou (MSFT on March 6, 2006, 1:59 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello JCO,

Thank you for posting.

From your post, my understanding on this issue is: You want to know where
in the registry does the screensaver time and turn-off monitor time save?
If I'm off base, please feel free to let me know.

Based on my my research and tests, the screensaver time stores in:

[HKEY_CURRENT_USER\Control Panel\Desktop\ScreenSaveTimeOut]

And it is stored in seconds.

The turn-off monitor time is more complex, since it is stored in binary
format under:

[HKEY_CURRENT_USER\Control Panel\PowerCfg]

Please let me know if you have any other concerns, or need anything else.

Sincerely,
Kenxl Zou
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>Thread-Topic: Correct Security Configuration for Mac Access to File Server
>thread-index: AcY+5NGCp4C0IwJoTgeUs26DVZs4vA==
>X-WBNR-Posting-Host: 136.167.76.86
>Subject: Correct Security Configuration for Mac Access to File Server
>Date: Fri, 3 Mar 2006 09:06:31 -0800
>Lines: 21
>MIME-Version: 1.0
>Content-Type: text/plain;
>        charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
>Newsgroups: microsoft.public.security
>Path: TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA03.phx.gbl microsoft.public.security:83770
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>X-Tomcat-NG: microsoft.public.security
>
>Hi -
>
>Sorry about the cross posting, but I realized later that it probably
belongs
>in this NG
>
>I have a W2K3, R2 server which I recently set up as a file and print
server.
>I ran the Security Configuration Wizard, then successfully tested all
access
>that I thought would be needed. I later realized that one or two Mac users
>will need to access files on the server.
>
>Can someone tell me the correct security configuration for Macs to be able
>to access the shares?
>
>I'm guessing that I may need to change the setting for SMB signing and/or
>something similar.
>
>Keep in mind that this is for SMB, not AFP, so I don't need to install
>Services for Mac.
>
>Thanks
>
>


Posted by Kenxl Zou (MSFT on March 6, 2006, 2:52 am
If you were  Registered and logged in, you could reply and use other advanced thread options
Hello ,

Sorry for my mistake. Please ignore my previous reply.

Thank you for posting.

From your post, my understanding on this issue is: You want to access some
shared documents on Windows Server 2003 from Mac clients using SMB. You
want to know if there any configuration that should be made on Windows
Server 2003? If I'm off base, please feel free to let me know.

Based on my research, if the file sharing is for SMB, then no changes are
needed on Windows Server 2003.

Perhaps there is something that needs to be configured on the Mac clients.
So I suggest you contact Apple's support department for help. I believe
there you will gain a solid solution.

Please let me know if you have any other concerns, or need anything else.

Sincerely,
Kenxl Zou
Microsoft Online Partner Support

Get Secure! - www.microsoft.com/security

=====================================================
When responding to posts, please "Reply to Group" via
your newsreader so that others may learn and benefit
from your issue.
=====================================================

This posting is provided "AS IS" with no warranties, and confers no rights.

--------------------
>Thread-Topic: Correct Security Configuration for Mac Access to File Server
>thread-index: AcY+5NGCp4C0IwJoTgeUs26DVZs4vA==
>X-WBNR-Posting-Host: 136.167.76.86
>Subject: Correct Security Configuration for Mac Access to File Server
>Date: Fri, 3 Mar 2006 09:06:31 -0800
>Lines: 21
>MIME-Version: 1.0
>Content-Type: text/plain;
>        charset="Utf-8"
>Content-Transfer-Encoding: 7bit
>X-Newsreader: Microsoft CDO for Windows 2000
>Content-Class: urn:content-classes:message
>Importance: normal
>Priority: normal
>X-MimeOLE: Produced By Microsoft MimeOLE V6.00.3790.1830
>Newsgroups: microsoft.public.security
>Path: TK2MSFTNGXA03.phx.gbl
>Xref: TK2MSFTNGXA03.phx.gbl microsoft.public.security:83770
>NNTP-Posting-Host: TK2MSFTNGXA03.phx.gbl 10.40.2.250
>X-Tomcat-NG: microsoft.public.security
>
>Hi -
>
>Sorry about the cross posting, but I realized later that it probably
belongs
>in this NG
>
>I have a W2K3, R2 server which I recently set up as a file and print
server.
>I ran the Security Configuration Wizard, then successfully tested all
access
>that I thought would be needed. I later realized that one or two Mac users
>will need to access files on the server.
>
>Can someone tell me the correct security configuration for Macs to be able
>to access the shares?
>
>I'm guessing that I may need to change the setting for SMB signing and/or
>something similar.
>
>Keep in mind that this is for SMB, not AFP, so I don't need to install
>Services for Mac.
>
>Thanks
>
>


Similar ThreadsPosted
What is correct way to create secedit.sdb file? April 12, 2007, 2:06 am
Win2003 SERVER file security BUG! February 7, 2006, 8:49 am
File Security in Windows Server 2003. April 24, 2006, 2:06 pm
Windows 2003 Server Open File - Security Warning June 19, 2006, 11:59 am
Security Configuration Wizard (SCW) March 1, 2007, 2:35 pm
Security Configuration Wizard December 10, 2007, 3:31 am
How to install security configuration wizard December 30, 2005, 1:37 pm
Security Configuration Editor - Custom Settings Removal August 16, 2005, 7:03 am
W2k3 SP2 breaks Security Configuration and Analysis util April 7, 2007, 3:42 am
Bypassing domain and OU GPO settings using the Security Configuration and Analysis MMC May 11, 2008, 9:40 pm

The site map in XML format XML site map

Contact Us | Privacy Policy