Re: Network printing from Mac OSX 10.4.9

Tech-Archive recommends: Speed Up your PC by fixing your registry



Yes, I know it is a GPO that is affecting this.

Yes, I created another GPO, applied it to the OU that holds the server and enforced it.

Yes, I used RSOP to verify that the server was using the expected settings.

The server showed everything correctly, however the problem persists. Therefore, the only conclusion that I can come to is that I am using the wrong settings. The settings that I am using are documented in the following article:
http://simultaneouspancakes.com/Lessons/archives/2004/12/how_to_disable.shtml

I would like to point out that our Mac clients are able to connect to file shares just fine as we are prompted for credentials at the time of connection. However, the adding of a printer remains another story.

Richard

"Charlie" <baboon@xxxxxxxxxxxxxx> wrote in message news:BBED59FC-B844-4175-B9C3-9353A690436C@xxxxxxxxxxxxxxxx
You say that as soon as you join the print server to the domain, you have the
problem, so you have figured out that there must be a GPO applied to the
domain or an OU that affects this.

You also say that you applied a test policy that overrides the SMB signing
policy. Where did you create the policy? If it was a local policy, that
won't hold up to a domain or OU applied policy. If you want to make sure
that the correct policy is applied, then apply the policy that disables SMB
signing to the OU that the server is directly a member of.

Most importantly though, you need to run rsop.msc to see what policies are
actually being applied to the server and from where.



"Richard Perry" wrote:

I have several Mac OS X clients on our network, and they are joined to our
2003 AD domain.

About a year ago when I first tested this, I was able to print from the Mac
client directly to the Server 2003 print shares without issue. These are IP
printers on the Server 2003 print server then shared as AD printers.

A few weeks ago, when we actually installed a printer in our Mac lab, it was
discovered that the Mac clients were unable to print. The message varies,
but regularly displays the message 'nt_status_access_denied' on the Mac
client.

I have read several articles that all point to SMB signing on the default
domain policy as being the problem. However, when I create a test policy
that counteracts the SMB signing requirement, and apply it to a test print
server, I am still having the same problem with the Mac clients.

On a stand-alone Server 2003 (aka not joined to the domain), I am able to
print just fine from the Mac client to the server. As soon as I join this
server to the domain, printing stops.

Can anyone please help me zero in on the exact problem and exact fix?

Richard


.



Relevant Pages

  • Re: SCW question.
    ... Created a new Server and installed IIS. ... and saw that the default rights for IUSR and IWAM users are there. ... Server to the domain without and GPO's applied...Local Security policy ... rights (which coincides with my Member server GPO settings). ...
    (microsoft.public.windows.server.security)
  • Re: Group Policy is now inhibiting the Administrator account
    ... under Group Policy Objects - those are the individual GPOs. ... You can apply any given GPO to one or more OUs, ... I use all of the default security in SBS, ... log on to the server with your own account. ...
    (microsoft.public.windows.server.sbs)
  • Re: User Profiles
    ... You can use Folder redirection for the Start Menu, ... Exactly what icons are you getting from the Default Domain Policy, ... and in which GPO setting are they defined? ... MCSE, CCEA, Microsoft MVP - Terminal Server ...
    (microsoft.public.windows.terminal_services)
  • Re: GPO - Access denied after changing a GP setting
    ... You are about to restore Default Domain policy and Default domain Controller po ... This may render some server applications to fail. ... Unable to open the GPO due to access denied. ... You are about to restore Default Domain controller policy for the following domain ...
    (microsoft.public.windows.server.security)
  • Re: GPO - Access denied after changing a GP setting
    ... This may render some server applications to fail. ... y Unable to open the GPO due to access denied. ... This tool was unable to re-create the EFS Certificates in the Default D omain Policy GPO Access is denied. ... You are about to restore Default Domain controller policy for the following domain Do you want to continue: ...
    (microsoft.public.windows.server.security)