A
Anwar Mahmood
Hi all,
I'm working on a project to integrate Macs to a predominantly Windows
Server 2003 Active Directory network.
In a test environment, I've joined an iMac to Active Directory and can
successfully logon with different Active Directory accounts.
I then want to print to network printers. This is most reliably
achieved using UNIX standards on the iMac and on the Windows Server
2003 box. So, I've installed Print Services for UNIX on the server,
created a printer and shared it.
I can create a printer on the iMac and print successfully to the
shared printer without problems.
However, if I then modify the default permissions, withdrawing the
Everyone entry from the Security tab list and only permitting
individual users to print, the permissions are enforced when I test
them using a Windows XP box, but not for the iMac. I've used the
Advanced>Effective Permissions feature to verify that the account is
indeed not entitled to print, but it still works.
I'm very puzzled by this behaviour. This is a runtime Windows Server
2003 SP2 x86-32 Standard server, patched to the hilt then promoted to
an AD DC. I've lowered one security setting relating to digitally
signed communications that is necessary for OS X to join an Active
Directory domain, but nothing else.
Anyone else encountered this?
Kindest regards,
Anwar
I'm working on a project to integrate Macs to a predominantly Windows
Server 2003 Active Directory network.
In a test environment, I've joined an iMac to Active Directory and can
successfully logon with different Active Directory accounts.
I then want to print to network printers. This is most reliably
achieved using UNIX standards on the iMac and on the Windows Server
2003 box. So, I've installed Print Services for UNIX on the server,
created a printer and shared it.
I can create a printer on the iMac and print successfully to the
shared printer without problems.
However, if I then modify the default permissions, withdrawing the
Everyone entry from the Security tab list and only permitting
individual users to print, the permissions are enforced when I test
them using a Windows XP box, but not for the iMac. I've used the
Advanced>Effective Permissions feature to verify that the account is
indeed not entitled to print, but it still works.
I'm very puzzled by this behaviour. This is a runtime Windows Server
2003 SP2 x86-32 Standard server, patched to the hilt then promoted to
an AD DC. I've lowered one security setting relating to digitally
signed communications that is necessary for OS X to join an Active
Directory domain, but nothing else.
Anyone else encountered this?
Kindest regards,
Anwar