Tek-Tips is the largest IT community on the Internet today!

Members share and learn making Tek-Tips Forums the best source of peer-reviewed technical information on the Internet!

  • Congratulations derfloh on being selected by the Tek-Tips community for having the most helpful posts in the forums last week. Way to Go!

Connect a Mac to Win2k8 Share

Status
Not open for further replies.

shmoes

MIS
Apr 24, 2003
567
CA
I want to connect a single mac to a share on our win2k8 Terminal server

what i've gathered is i need to start by changing the following settings

Microsoft Windows Server has a some vaguely-worded options which must be disabled to allow OS X's Samba to connect. I never did fix the "name or password is incorrect" error connecting via Samba to my Windows 2000 Server install, so I always passed data back and forth using an XP machine. Seeking to end that kluge with my new Windows 2003 Server install, I hacked everything I could find on the OS X side to no avail. I finally gave up and turned to the Domain Server for salvation. Eventually, I found the right settings:

Start -> All Programs -> Administrative Tools -> Domain Controller Security Policy. You can ignore any errors about truncated strings ... gotta love one-button alerts. Then navigate into Local Policies: Security Options, and set the following:

Microsoft Network Server: Digitally sign communications (always): DISABLED
Microsoft Network Server: Digitally sign communications (if client agrees): ENABLED
Now, if you want the Server to be able to connect to the Macs on the network, or any Samba server (I think), set the following in the same Local Policies: Security Options area:
Microsoft Network Client: Digitally sign communications (always): DISABLED
Microsoft Network Client: Digitally sign communications (if server agrees): ENABLED
And finally, if you want the domain's Windows boxes to be able to connect to the Mac/Samba, set the following:
Domain Member: Digitally encrypt or sign secure data channel (always): DISABLED
Domain Member: Digitally encrypt secure data channel (when possible): ENABLED
Domain Member: Digitally sign secure data channel (when possible): ENABLED

problem is i can't find a domain controller sercurity option the only thing I see is local security option which has the items specified in there, but they're greyed out and cannot be changed...

I tried adding the mac (10.5.2) to the domain but it can't even see it (though it can see other windows pc's on the same network) I think not being able to see it is because of these settings though i'm not sure.. I'm just not sure where else to look.

~AZ

 
The Domain Controller Security Policy is only available on Domain Controllers. Try checking there instead of on the Terminal Server.

________________________________________
CompTIA A+, Network+, Server+, Security+
MCSE:Security 2003
MCTS:Active Directory
MCTS:Network Infrastructure
MCTS:Applications Infrastructure
 
he is using rdp at this moment, but I would like to be able to figure out the share thing as well

in this case there is only one server the terminal server is the domain controller.



~AZ

 
Not necessarily. The terminal server is the terminal server. It could possibly be a domain controller, but you don't have to have a domain controller (though you do need one for the Terminal Services Licensing service).

________________________________________
CompTIA A+, Network+, Server+, Security+
MCSE:Security 2003
MCTS:Active Directory
MCTS:Network Infrastructure
MCTS:Applications Infrastructure
 
lol, that confused me. Since it's the only server and TS and TS Licensing Server are installed on it, I'll assume we're on the same page that it's the DC?



~AZ

 
Status
Not open for further replies.

Part and Inventory Search

Sponsor

Back
Top