Re: Blocking OSX computer from Windows 2000 Server

From: William M. Smith (mecklists_at_REMOVETHIS.mn.rr.com)
Date: 03/07/04

  • Next message: William M. Smith: "Re: WindowsXP Remote Desktop Client" 
    Date: Sat, 06 Mar 2004 20:11:19 -0600

    On 3/2/04 10:46 PM, in article #5J6krNAEHA.3940@TK2MSFTNGP11.phx.gbl, "Brad"
    <bradw2000@alltel.net> wrote:

    > I have a Mac running OSX10.1 and I set it up to share a folder between a
    > windows 2000 pro workstation and vise versa, so that sharing files can be
    > done. This user setup OSX to use our Win2k DHCP Server for an IP and now
    > has access to all of my windows server shares as well as internet access.
    > My boss does not want this. He only wants the Mac to access the users
    > windows pro box. I remember seeing somewhere that I can block access using
    > the MAC address of the nic, not sure how. Anyway if anyone knows how I can
    > block all access from the Mac station to the network and limit it to just
    > the windows pro box, I would greatly appreciate it. Server is running SP4
    > and all computers are connected to same switch.

    Hi Brad!

    Your problem shouldn't be addressed to "block the Mac", but instead to block
    unauthorized access. Although you're referring to your Mac as the client you
    want to block, you've obviously done nothing to prevent other machines
    (Windows, Mac or Unix-based) from external sources from accessing your
    network.

    First, your Mac needs the IP address from the DHCP server to function on
    your network unless you're willing to give it a hard-coded address. To
    function with the Windows 2000 Pro machine, it must be able to speak IP. You
    may want to take the Mac's MAC address and use DHCP to assign a specific IP
    address of your choosing.

    Depending on what you're using for a NAT or proxy server, you can block
    either by MAC address or IP address certain machines from using your
    Internet connection. Check your Internet connection server's documentation
    or Help section for this.

    For your Windows shares, don't worry that the Mac can _see_ the shares. If
    your Mac is able to access the files, then you've failed to set proper
    permissions for the user.

    Finally, what is your boss' concern for the Mac being able to access the
    server? What is he wanting to prevent that a visiting Windows laptop user
    from outside your company would be allowed to do?

    bill 

    -- 
William M. Smith
(Microsoft Interop MVP)
A great resource for Mac OS X deployment
http://www.macosxlabs.org
  • Next message: William M. Smith: "Re: WindowsXP Remote Desktop Client"

    Relevant Pages

    • Re: kerberos problem
      ... I am not familiar with Mac logons to a Windows domain, ... Server 2003 server. ... > The Windows Server 2003 doesn't show any Kerberos errors in the Event Viewer. ...
      (microsoft.public.win2000.security)
    • 15 reasons Macs are still better than Windows PCs
      ... With Windows 7 coming up, it's time to yet again ponder on whether ... I long ago stopped actively seeking out Mac vs PC discussions (partly ... Apple uses good quality parts. ... problem lies from those three apps. ...
      (comp.sys.mac.advocacy)
    • Re: powerpc 8600/250, lo conoscete?
      ... puoi collegare diversi tipi di computer e server ... Puoi collegarti a computer Mac in cui la "Condivisione documenti" o la ... "Condivisione Windows" siano attive nonché ...
      (it.comp.macintosh)
    • Re: How to set up in order to map to Window server from G5 computer
      ... Make sure to check the Apple Macintosh check box. ... On the Mac ... I have try to log into the Windows server, ... Do you have File Services for Macintosh enabled on the Windows ...
      (microsoft.public.macintosh.general)
    • Help - cant remote access Windows email server
      ... I'm a Mac guy trying to get a couple of iMacs (mine and my daughter's to ... remotely access her employer's Windows email server). ... are the instructions to set up a PC at home running Windows: ... When prompted for username and password enter your network information. ...
      (comp.sys.mac.system)
    Loading