Re: [WinMac] Macs Printing Past NT Security

James Rupprecht(jimrupp[at]kuhub.cc.ukans.edu)
Thu, 01 Oct 1998 11:44:14 -0500

At 01:23 PM 9/26/98 -0400, you wrote:
>NT allows you to "capture" the appletalk printer, thus hiding it from the
>chooser and forcing the mac users to use the NT spooler in order to print.
>
>check the port's properties in NT control panel for the "capture" setting.
>
>
>-Jorge

I don't think this will solve the poster's original problem...that he needs
to have the macs authenticate before printing. When you capture a printer
with NTAS, the Mac clients simply see a print spool instead of (or in
addition to, depending on how you are set up) the physical device. If
memory serves, there is no way to make the a Mac authenticate before
printing. I believe this is due to how apple printer spooling works. Here
is a snip of an article from the NTRK, (pulled off Technet):

"Although native Macintosh networking provides support for file security,
it does not provide support for print device security. The AppleTalk
protocol contains no mechanism that supports client user name or password.
Macintosh clients, therefore, cannot identify themselves on the network,
and the Windows NT print server cannot impose user-level security on
Macintosh clients. If a Macintosh client is physically able to send a job
to a print device or print server, that client implicitly has permission to
do so.

You can, however, enforce one set of printer permissions on all Macintosh
users as a group. The Macintosh client must start the MacPrint service by
logging on using a user account. By default, it logs on as the System
account. The System account has Print permission on all local print
devices, so any Macintosh client can send a job to any of the Windows NT
computer’s local printers. To limit the permissions for Macintosh clients,
create a new user account, giving it the printer permissions you want the
group to have. Then set the Macintosh client MacPrint service to log on
using this account."

Hope this helps...

James Rupprecht
Systems Specialist
Applied English Center
University of Kansas

* Windows-MacOS Cooperation List *
* FAQ: <http://www.darryl.com/winmacfaq/> *
* Archives: <http://www.darryl.com/winmac/> *
* Subscribe: <mailto:winmac-on@xerxes.frit.utexas.edu> *
* Subscribe Digest: <mailto:winmac-digest@xerxes.frit.utexas.edu> *
* Unsubscribe: <mailto:winmac-off@xerxes.frit.utexas.edu> *

This archive was generated by hypermail 2.0b2 on Thu Oct 01 1998 - 09:48:49 PDT