Mac Clients

One of the most remarkable features that Microsoft included with Windows NT Server is the capability to act as a fully functional file server for Macintosh clients.

There is no hard-coded limit as to the number of simultaneous Macintosh clients that can connect. To demonstrate the extensibility of Windows NT Server as a Macintosh file server, Microsoft has conducted real-world testing where they created over 1,000 simultaneous Macintosh connections to a single NT Server.

Installing and Configuring Services for Macintosh

Enabling Macintosh support for Windows NT Server is exceptionally simple. In fact, it is just as straightforward as installing almost any other service. There are essentially five steps:

  1. Install the Services for Macintosh service
  2. Configure the File Server options
  3. Configure the AppleTalk router options, if desired
  4. Create any Macintosh Volumes and assign appropriate permissions
  5. Install the Microsoft User Authentication Module (UAM) on Macintosh clients, if desired
Installing Services for Macintosh

In order to install Services for Macintosh, you must have at least one NTFS volume.

When you install Services for Macintosh on your system, there are a number of changes that take effect. These include the following:

To install Services for Macintosh you should be logged on as a member of the Administrators group and follow these steps:

  1. From the Control Panel, double-click the Networks icon.
  2. Click the Services tab. This brings up the Services page, which lists all the services currently installed on your system.
  3. Click the Add button. This brings up a window that lists all the services that can be installed on your system. Scroll down to Services for Macintosh and select it

    When you have highlighted Services for Macintosh, click OK.

  4. You might be asked to provide the location of the Windows NT Server installation files. If so, enter full path, such as f:\i386, where f: is the CD-ROM drive. Click the Continue button.
    NT Setup will copy files from the distribution media and make modifications to your system. This might take a few moments. When it is completed, it will return you to the Services page on the Network Control Panel. Services for Macintosh should be listed under Network Services.

    Once you have installed Services for Macintosh, it will appear in the list of Network Services in the Network Control Panel.

  5. Click OK to close the Network Control Panel window and complete the installation process.
    NT Setup will review the network adapter binding and services. This might take a few minutes. Once this is completed, the Microsoft AppleTalk Protocol Properties window will appear.

    This window is used to configure the AppleTalk protocol options.

  6. The default network adapter for your system will be listed in the field Default Adapter. This is the physical network on which the NT Server will advertise its services. If you have more than one adapter, you can choose which physical network segment you want your system to advertise on. This will make a difference if AppleTalk routing is not enabled.
  7. The second field here, Default Zone, is the zone where the NT Server will advertise its services. Each AppleShare server can advertise itself in only one zone. If you don't already have an AppleTalk router on the network, this pull-down list will be empty. If you do have an existing AppleTalk router, the designated default zone on the router will be listed in the Default Zone entry. If you want the NT Server to appear in a different zone, choose it from the pull-down list.

    For information on configuring NT Server as an AppleTalk router, see the section, Configuring Windows NT Server as an AppleTalk Router, later in this chapter.

  8. Click OK to continue.
    NT Setup will finish making internal configuration changes. This might take a few minutes. When it is completed, you will need to restart the system before any changes will take effect.
  9. Click Yes when prompted to restart the system.

When the system restarts, all printers created on the NT Server will become available to Macintosh clients.

Configuring Services for Macintosh

You can configure Services for Macintosh by three different methods. The most common is to use the MacFile Control Panel, as we will do here. However, you can also use the Server Manager or the MACFILE command-line utility to perform the same functions.

To configure Services for Macintosh using the MacFile Control Panel, follow these steps:

  1. Open the Control Panel. Notice the MacFile icon. This was installed with Services for Macintosh. The MacFile icon in the Control Panel is used to configure the Services for Macintosh options.

  2. Double-click the MacFile icon. The MacFile Properties window appears. The MacFile Properties window displays file usage and information on logged on users.

  3. Click the Attributes button. The MacFile attributes window will appear.

The options for the MacFile Attributes window are as follows:

  • Sessions. You can use this option to limit the number of Macintosh clients who can simultaneously connect to the NT Server. By default, there is no limit. If you want to limit the number of users, you can enter a value between 1 and 4,294,967,293.

    Creating Macintosh-Accessible Volumes

    In the AppleShare world, network volumes are the resources that are made available on an AFP file server for network users to connect to. They are logically the same as network shares, share points, or mount points in the Windows networking world. The process for creating a Macintosh-accessible volume with NT Server is similar to that of creating a standard network share that would be accessed by Windows networking clients.

    There is one major difference between Macintosh volumes and standard Windows share, which you should be careful of. With Windows shares, you can create shares within shares. However, with Services for Macintosh, you cannot create Macintosh-accessible volumes within other Macintosh-accessible volumes.

    There are four tools you can use to create Macintosh-accessible volumes in Windows NT:

    Microsoft did not include a method for creating Macintosh shares from the NT Explorer interface.

    We will only discuss using File manager in this section.

    NT Server automatically creates a Macintosh-accessible volume called Microsoft UAM Volume when you install Services for Macintosh. This volume is created on the first NTFS partition on your server.

    Using the File Manager to Create a Macintosh-Accessible Volume

    To create a Macintosh-accessible volume using the File Manager, follow these procedures:

    1. Open the File Manager. The easiest way to get into the File Manger in NT 4.0 is to click the Start menu, choose Run and then type winfile and hit return.
    2. Find and select the directory you want to share as a Macintosh volume, such as D:\USERS. Select the directory you want to make accessible to Macintosh clients.

    3. Choose Create Volume from the MacFile menu. The Create Macintosh-Accessible Volume window appears. The Create Macintosh-Accessible Volume window enables you to specify options for the new volume.

      From here, you must specify the following:

      • Volume Name. This is the volume name the Macintosh clients will see. It must be 27 characters or less. You can create a maximum of 255 Macintosh volumes on a single server. By default, this is the name of the folder you are sharing.
      • Path. This is the path of the folder you want to share. It must be on a local volume, and it must be NTFS, or CDFS.
      • Password/Confirm Password. You can specify a password here and any Macintosh will be required to enter this password when connecting to this share. This security is provided in addition to any additional folder- and volume-level permission you might have set.
      • This volume is read-only. If you check this box, the volume will be marked as read-only. Any Macintosh user who connects to the volume will be unable to make changes to the volume, regardless of what additional privileges they might have.
      • Guests can use this volume. If you select this option, Macintosh users will be able to connect to this volume as a guest. If guest access is disabled from the MacFile Control Panel, this option has no effect. NOTE:

        Guest access from Macintosh clients has nothing to do with the NT Guest account. For more information on Macintosh guest access, see the section Understanding Macintosh Guest Logons, earlier in this chapter.

      • User Limit. You can use this setting to limit the number of simultaneous Macintosh clients that can access this volume. NT Server has no built-in practical limitation as to the number of Macintosh clients it can serve. NOTE:

        The sum of the number of users of all the Macintosh-accessible volumes cannot exceed the Macintosh user limit in the MacFile Control Panel.

    4. When you are finished entering the volume information into the Create Macintosh-Accessible Volume window, click the Permissions button to specify the access permissions for the volume. You can use NT to specify the Macintosh permissions exactly as you would on a standard AppleShare server.

      From here you can specify the permissions for the Owner, Primary Group, and Everyone. Additionally, you can change the Owner and Primary Group.
      For more information on setting Macintosh permissions, see Working with Macintosh Permissions, earlier in this chapter.


      :It is very important to realize that Services for Macintosh does not distinguish between share permissions and file folder permissions. Standard Windows NT shares have their own permissions, which are different from the permissions set on the files and directories contained within. However, the volume permissions for a Macintosh, are exactly the same as the folder where the volume begins. This means that if you change the permissions when you create a Macintosh volume, the NTFS permissions will directly and immediately reflect the change.

    5. Click OK to close the security window.
    6. Click OK again to create the share.

    Macintosh users should now be able to access the share.

    Viewing and Modifying Macintosh-Accessible Volumes

    You can use the MacFile option in the File Manger to view and modify the settings for Macintosh-Accessible volumes.

    Any changes you make to the volume, including setting or clearing the read-only flag, will take effect immediately. However, if you remove guest access for the volume by clearing the Guests Can Use this Volume option, it will not affect any users currently logged on as guests. This is because this option is only checked at logon.

    Removing Macintosh-Accessible Volumes

    You can remove Macintosh-Accessible volumes, by using the Remove Volumes option under the MacFile menu in the File Manager.

    If there are any Macintosh users accessing the share, you will be warned that removing the share could result in the connected users loosing data. You will be warned if you try to remove a Macintosh-accessible volume with active users. You can wait until the users have logged out, or you can click Yes to proceed and remove the volume anyway.

    Printing from Macintosh Clients to an NT Server

    One of the truly remarkable aspects of NT Server is how seamlessly the Services for Macintosh are integrated with the rest of the system. Perhaps this is seen best in how easy it is for Macintosh Clients to print to printers through an NT Server.

    When you install Services for Macintosh, NT automatically makes all printers on the NT system available to Macintosh clients. This means there is nothing that needs to be done for your Macintosh users to begin printing. All printers created on the NT Server will appear in the same zone as the NT Server.

    From a Macintosh client, you use the Chooser to select a printer on an NT Server exactly the same way you would to any other AppleTalk network printer.