Re: [WinMac] Macs Printing Past NT Security

Dan Schwartz(expresso[at]snip.net)
Sat, 26 Sep 1998 14:17:04 -0400

        No, they don't need to log on to NT, unless "Security" is enabled.

        Control Panels -> Printers -> (Printer name) -> Printer ->
Properties -> Security tab -> Permissions.

        Default is to allow all users to print. Change Permissions to allow
individual users to print, but "Everyone" is disabled.

        Control Panels -> Printers -> (Printer name) -> Printer ->
Properties -> Security tab -> Auditing allows NT to track all printer usage.

        Cheers!
        Dan
         

At 10:29 AM 9/26/98 -0700, Michael Ritchie wrote:
>Dan,
>
>Would this option force the Mac users to log into the NT Server before
>printing, we need to know who is printing and how much they are printing.
>
>Michael Ritchie
>Graduate Student
>Information Tech/Mng.
>Arizona State University
>
>On Sat, 26 Sep 1998, Dan Schwartz wrote:
>
>>
>> Michael:
>>
>> Your IS staff needs to hit the "Help" button when setting up their SFM
>> print spool queues. They didn't even need to buy DAVE if they are using
>> NT/Server!
>>
>> Quoted from the Windows NT Help File:
>>
>> AppleTalk Port Configuration
>> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
>>
>> Capturing an AppleTalk printing device means that Macintosh users send
>> their print jobs through the computer running Windows NT Server. Releasing
>> a captured printing device means that the Macintosh users who print to it
>> directly will not get the benefit of spooling on the computer running
>> Windows NT Server. Also, print jobs sent to a released printing device are
>> not under the control of the system administrator.
>>
>> For a printing device to be seen by both PC and Macintosh clients, it must
>> be shared and captured. (Share a printer through the Printer Properties
>> dialog box, available from Print Manager.) Macintosh users will see the
>> name you designate in the Share Name option in the Printer Properties
>> dialog box.
>>
>> If you share a printer but do not capture it, Macintosh users will see the
>> printing device by both names--the AppleTalk name and the name you
>> designated in the Printer Properties dialog box.
>>
>> If you do not share a printing device and do not capture it, Macintosh
>> users will see it by its original AppleTalk name.
>>
>> You can release or recapture the printing device by clearing or selecting
>> the one option, as appropriate, in the AppleTalk Port Configuration dialog
>> box.
>>
>> Cheers!
>> Dan
>>
>> At 09:05 AM 9/26/98 -0700, Michael Ritchie <mritchie@asu.edu> wrote:
>> >Hello,
>> >
>> >We have a problem in our Library regarding Macs and NT 4.0.
>> >Recently we had installed Print Manager Plus on NT to count the
>> >nubmer of print outs our students print. This way we can moniter
>> >the amount of paper each student uses each month and charge them
>> >according to use. The first problem we encountered was that the
>> >Macs in out lab (two G3's) were bipassing the Windows NT and printing
>> >directly to the printers. So the solution was to install Dave 2.0 on
>> >each Mac and Print Manager Plus on the NT side to meter printing. We also
>> had
>> >to secure the Macs and our IS picked At-Ease. In this manner, each
student
>> >logs into the Macs using a generic password, and when they want to
print they
>> >must log in again using the same Username/Password that they do to log
into
>> >the Windows computers in the lab, all the time Dave 2.0 runs secretly
in the
>> >background. So, even though this is a pain to have two seperate login
>> >screens, the sytem was keeping our IS from booting the Macs off the
network,
>> >until now.
>> >
>> >The problem now is that out library has individual Ethernet connections at
>> >various desks and tables through out the library that connect directly to
>> our
>> >server. If a student hooks their Mac PowerBook up to these Ethernet
>> >connections, their Macs will just check what printers are aailabe on the
>> >network and print directly to that printer without getting authentication
>> from
>> >our server.
>> >
>> >We would like a difinitive solution to secure the Macs, all Macs, that
>> hook up
>> >to our network that mirrors the security each Windows computer does. The
>> best
>> >solution would be for the Macs to have a login screen the same as each
>> >Windows, using a single Username/Password, and then have each of their
print
>> >outs counted no matter where they print from, computer lab or via Ethernet
>> >connection. I am guessing that the solution must be on the NT side
because we
>> >can not require each student with a Mac to install Dave 2.0.
>> >
>> >Michael Ritchie
>> >Graduate Student
>> >Information Tech/Mng.
>> >Arizona State University
>>

        Yours truly,
        Dan Schwartz

        Dan's Macintosh Consulting
        Suite 1306
        1840 Frontage Road
        Cherry Hill, NJ 08034-2205

        609-795-8965

 -----------------------------------------------------------------

        <mailto:expresso@snip.net>

                Webmaster for <http://www.faulknerstudios.com>

 -----------------------------------------------------------------

* Windows-MacOS Cooperation List *
* FAQ: <http://www.darryl.com/winmacfaq/> *
* Archives: <http://www.darryl.com/winmac/> *
* Subscribe: <mailto:winmac-on@xerxes.frit.utexas.edu> *
* Subscribe Digest: <mailto:winmac-digest@xerxes.frit.utexas.edu> *
* Unsubscribe: <mailto:winmac-off@xerxes.frit.utexas.edu> *

This archive was generated by hypermail 2.0b2 on Sat Sep 26 1998 - 11:21:52 PDT