Blocking OSX computer from Windows 2000 Server

[Brad]

I have a Mac running OSX10.1 and I set it up to share a folder between a
windows 2000 pro workstation and vise versa, so that sharing files can be
done. This user setup OSX to use our Win2k DHCP Server for an IP and now
has access to all of my windows server shares as well as internet access.
My boss does not want this. He only wants the Mac to access the users
windows pro box. I remember seeing somewhere that I can block access using
the MAC address of the nic, not sure how. Anyway if anyone knows how I can
block all access from the Mac station to the network and limit it to just
the windows pro box, I would greatly appreciate it. Server is running SP4
and all computers are connected to same switch.

Thanks

Brad

 

[William M. Smith]

I have a Mac running OSX10.1 and I set it up to share a folder between a
windows 2000 pro workstation and vise versa, so that sharing files can be
done. This user setup OSX to use our Win2k DHCP Server for an IP and now
has access to all of my windows server shares as well as internet access.
My boss does not want this. He only wants the Mac to access the users
windows pro box. I remember seeing somewhere that I can block access using
the MAC address of the nic, not sure how. Anyway if anyone knows how I can
block all access from the Mac station to the network and limit it to just
the windows pro box, I would greatly appreciate it. Server is running SP4
and all computers are connected to same switch.

Hi Brad!

Your problem shouldn't be addressed to "block the Mac", but instead to block
unauthorized access. Although you're referring to your Mac as the client you
want to block, you've obviously done nothing to prevent other machines
(Windows, Mac or Unix-based) from external sources from accessing your
network.

First, your Mac needs the IP address from the DHCP server to function on
your network unless you're willing to give it a hard-coded address. To
function with the Windows 2000 Pro machine, it must be able to speak IP. You
may want to take the Mac's MAC address and use DHCP to assign a specific IP
address of your choosing.

Depending on what you're using for a NAT or proxy server, you can block
either by MAC address or IP address certain machines from using your
Internet connection. Check your Internet connection server's documentation
or Help section for this.

For your Windows shares, don't worry that the Mac can _see_ the shares. If
your Mac is able to access the files, then you've failed to set proper
permissions for the user.

Finally, what is your boss' concern for the Mac being able to access the
server? What is he wanting to prevent that a visiting Windows laptop user
from outside your company would be allowed to do?

bill

 

[Brad]

That did the trick, thanks. As for the reason, it's not a Mac issue it's an
employee issue, it just so happens that this employee uses a Mac and if the
boss wants it then.....

Thanks again

Brad