RE: [WinMac] Macs Printing Past NT Security

Dan Schwartz(expresso[at]snip.net)
Sat, 26 Sep 1998 17:53:25 -0400

        Dear Markus:

        That is correct: Only authenticated users should be allowed to print.

        You may also want to use the System Policy Editor (in the Administrative
Tools folder) to fine-tune what you allow the "Students" group to do... And
not do. This is much more powerful.

        Cheers!
        Dan

At 02:38 PM 9/26/98 -0700, you wrote:
>
>Dan,
>
>Security is enabled: only admins, creator owner, print ops, and the
>"Students" group are allowed to print or manage, respectively. Do I have to
>set include "Everyone" in the permissions with "No Access" to have an impact
>on authentication? Seems a bit strange...
>
>Thanks!
>
> Markus Pickartz
> Support Systems Analyst
> Ross-Blakley Law Library
> Arizona State University
> P.O. Box 877806
> Tempe, AZ 82587-7806
> Fax: (602) 965-4283
> Phone: (602) 965-7573
> E-Mail: markus.pickartz@asu.edu
><mailto:markus.pickartz@asu.edu>
> http://www.lawlib.asu.edu/users/markusp
><http://www.lawlib.asu.edu/users/markusp>
>ICQ UIN: 905089
>
>
> -----Original Message-----
> From: Dan Schwartz [mailto:expresso@snip.net]
> Sent: Saturday, September 26, 1998 2:17 PM
> To: markus.pickartz@asu.edu
> Subject: Re: [WinMac] Macs Printing Past NT Security
>
>
> No, they don't need to log on to NT, unless
>"Security" is enabled.
>
> Control Panels -> Printers -> (Printer name) ->
>Printer ->
> Properties -> Security tab -> Permissions.
>
> Default is to allow all users to print. Change
>Permissions to allow
> individual users to print, but "Everyone" is disabled.
>
> Control Panels -> Printers -> (Printer name) ->
>Printer ->
> Properties -> Security tab -> Auditing allows NT to track
>all printer usage.
>
> Cheers!
> Dan
>
>
> At 10:29 AM 9/26/98 -0700, Michael Ritchie wrote:
> >Dan,
> >
> >Would this option force the Mac users to log into the NT
>Server before
> >printing, we need to know who is printing and how much they
>are printing.
> >
> >Michael Ritchie
> >Graduate Student
> >Information Tech/Mng.
> >Arizona State University
> >
> >On Sat, 26 Sep 1998, Dan Schwartz wrote:
> >
> >>
> >> Michael:
> >>
> >> Your IS staff needs to hit the "Help" button when
>setting up their SFM
> >> print spool queues. They didn't even need to buy DAVE if
>they are using
> >> NT/Server!
> >>
> >> Quoted from the Windows NT Help File:
> >>
> >> AppleTalk Port Configuration
> >> ~~~~~~~~~~~~~~~~~~~~~~~~~~~~
> >>
> >> Capturing an AppleTalk printing device means that
>Macintosh users send
> >> their print jobs through the computer running Windows NT
>Server. Releasing
> >> a captured printing device means that the Macintosh users
>who print to it
> >> directly will not get the benefit of spooling on the
>computer running
> >> Windows NT Server. Also, print jobs sent to a released
>printing device are
> >> not under the control of the system administrator.
> >>
> >> For a printing device to be seen by both PC and Macintosh
>clients, it must
> >> be shared and captured. (Share a printer through the
>Printer Properties
> >> dialog box, available from Print Manager.) Macintosh
>users will see the
> >> name you designate in the Share Name option in the
>Printer Properties
> >> dialog box.
> >>
> >> If you share a printer but do not capture it, Macintosh
>users will see the
> >> printing device by both names--the AppleTalk name and the
>name you
> >> designated in the Printer Properties dialog box.
> >>
> >> If you do not share a printing device and do not capture
>it, Macintosh
> >> users will see it by its original AppleTalk name.
> >>
> >> You can release or recapture the printing device by
>clearing or selecting
> >> the one option, as appropriate, in the AppleTalk Port
>Configuration dialog
> >> box.
> >>
> >> Cheers!
> >> Dan
> >>
> >> At 09:05 AM 9/26/98 -0700, Michael Ritchie
><mritchie@asu.edu> wrote:
> >> >Hello,
> >> >
> >> >We have a problem in our Library regarding Macs and NT
>4.0.
> >> >Recently we had installed Print Manager Plus on NT to
>count the
> >> >nubmer of print outs our students print. This way we
>can moniter
> >> >the amount of paper each student uses each month and
>charge them
> >> >according to use. The first problem we encountered was
>that the
> >> >Macs in out lab (two G3's) were bipassing the Windows NT
>and printing
> >> >directly to the printers. So the solution was to
>install Dave 2.0 on
> >> >each Mac and Print Manager Plus on the NT side to meter
>printing. We also
> >> had
> >> >to secure the Macs and our IS picked At-Ease. In this
>manner, each
> student
> >> >logs into the Macs using a generic password, and when
>they want to
> print they
> >> >must log in again using the same Username/Password that
>they do to log
> into
> >> >the Windows computers in the lab, all the time Dave 2.0
>runs secretly
> in the
> >> >background. So, even though this is a pain to have two
>seperate login
> >> >screens, the sytem was keeping our IS from booting the
>Macs off the
> network,
> >> >until now.
> >> >
> >> >The problem now is that out library has individual
>Ethernet connections at
> >> >various desks and tables through out the library that
>connect directly to
> >> our
> >> >server. If a student hooks their Mac PowerBook up to
>these Ethernet
> >> >connections, their Macs will just check what printers
>are aailabe on the
> >> >network and print directly to that printer without
>getting authentication
> >> from
> >> >our server.
> >> >
> >> >We would like a difinitive solution to secure the Macs,
>all Macs, that
> >> hook up
> >> >to our network that mirrors the security each Windows
>computer does. The
> >> best
> >> >solution would be for the Macs to have a login screen
>the same as each
> >> >Windows, using a single Username/Password, and then have
>each of their
> print
> >> >outs counted no matter where they print from, computer
>lab or via Ethernet
> >> >connection. I am guessing that the solution must be on
>the NT side
> because we
> >> >can not require each student with a Mac to install Dave
>2.0.
> >> >
> >> >Michael Ritchie
> >> >Graduate Student
> >> >Information Tech/Mng.
> >> >Arizona State University
> >>

        Yours truly,
        Dan Schwartz

        Dan's Macintosh Consulting
        Suite 1306
        1840 Frontage Road
        Cherry Hill, NJ 08034-2205

        609-795-8965

 -----------------------------------------------------------------

        <mailto:expresso@snip.net>

                Webmaster for <http://www.faulknerstudios.com>

 -----------------------------------------------------------------

* Windows-MacOS Cooperation List *
* FAQ: <http://www.darryl.com/winmacfaq/> *
* Archives: <http://www.darryl.com/winmac/> *
* Subscribe: <mailto:winmac-on@xerxes.frit.utexas.edu> *
* Subscribe Digest: <mailto:winmac-digest@xerxes.frit.utexas.edu> *
* Unsubscribe: <mailto:winmac-off@xerxes.frit.utexas.edu> *

This archive was generated by hypermail 2.0b2 on Sat Sep 26 1998 - 14:57:56 PDT