Re: Access rights of a Macintosh on a Windows share

Tech-Archive recommends: Fix windows errors by optimizing your registry

In article <D84DF03F-84C1-4B6F-A9EE-950264B84D41@xxxxxxxxxxxxx>,
"Nicolas Heyer" <NicolasHeyer@xxxxxxxxxxxxxxxxxxxxxxxxx> wrote:

> Hello
>
> I have installed the UAM client to all our Macintosh clients. They can use
> their AD credentials to access shares on a windows member server. I found
> also out that I had to set a "Primary default group" in order for our MAC
> users to have "better" access rights than those of the "domain users" group.
>
> But even after changing the "primary group" of a MAC user and even after
> assigning NTFS rights to the user directly, the share properties show only
> "domain user" rights" (that meens "Read" rights only while he was allowed
> "Modify" NTFS rights through a specific group set as primary and even
> "Modify" for the user itself).
>
> What is wrong ? Are the NTFS rights the correct way to set access rights for
> MAC users or should I only define "Share" rights ?

Hi Nicolas!

You're modifying rights on the server using ACLs (Access Control Lists)
and Macs don't support this... yet. Tiger, which will be released later
this month is suppose to be fully compatible with Windows ACLs.

Modifying the various properties of an object on the server side can
product bizarre permissions results on the Macs, which only understand
three levels of permissions: owner, group and everyone.

Share your Mac volume from the server then go to a Mac, log in as the
owner and set your permissions that way.

I typically make Administrators the owner. I put those who need
read/write access into a global group nested into a local group specific
to the volume and select that at the group for the volume and then set
Everyone to either read only or no access.

Hope this helps! bill
--
William M. Smith
(Microsoft Interop MVP)
.

Relevant Pages

  • Re: Any major differences between Mac and Windows "Registry" ?
    ... Mac user to totally ignore excellent Windows apps, ... Mac user, but whether that benefit would be sufficient to justify ... It is not just the demanding speech engine that the CPU has to ...
    (comp.sys.mac.system)
  • Re: Funny how Snit duped exWinman
    ... his plaintive appeals for adulation from Mac ... cloning Steve Jobs and making him head of Microsoft's Department ... the narrow and unsophisticated mind of the garden variety Mac basher. ... You encounter a Mac user who says he reads children's stories like ...
    (comp.sys.mac.advocacy)
  • Re: Mac Outlook 2001 - modifying distribution lists
    ... You will have to modify it using Outlook on PC or AD itself on GC. ... > We have a user with Mac OS 9 and Outlook 2001. ... The fix for this problem on the PCs was ...
    (microsoft.public.outlook.mac)
  • Re: Mac Bug Exploit Appears
    ... Michelle Ronn wrote: ... No mac user was ever touched by that code, ... There would be no way of detecting this code executing on a Mac system before the patch was released. ...
    (comp.sys.mac.advocacy)
  • Re: DVD Plus or Minus R
    ... Has any Mac user here had one? ... Don't blame Vista on Apple. ...
    (rec.audio.pro)