connect Mac OS X to Windows 2003 server

[Franz Schenk]

a customer needs some access to files that are stored on Windows 2003
servers and Windows 2003 domain controllers.

OS X has built in SMB support and we have access to file ressources on
Windows 2003 member servers. But access to file ressources on Windows 2003
domain controllers is denied. I'm nearly sure that the problem are different
default security settings on domain controllers and on member servers like
SMB signing, password encryption etc. We don't want to install mac support
on Windows 2003 DC's because of the administrative overhead this would
produce.

Does anyone know which security settings in the GPO of the domain
controllers we have to adjust that Mac OS X computers can access the DC's
like they can access the member servers?

Thanks in advance for any help
Franz

 

[William M. Smith]

a customer needs some access to files that are stored on Windows 2003
servers and Windows 2003 domain controllers.

OS X has built in SMB support and we have access to file ressources on
Windows 2003 member servers. But access to file ressources on Windows 2003
domain controllers is denied. I'm nearly sure that the problem are different
default security settings on domain controllers and on member servers like
SMB signing, password encryption etc. We don't want to install mac support
on Windows 2003 DC's because of the administrative overhead this would
produce.

Does anyone know which security settings in the GPO of the domain
controllers we have to adjust that Mac OS X computers can access the DC's
like they can access the member servers?

Thanks in advance for any help

Hi Franz!

I'm not sure if you've already changed this, but look for "Microsoft client:
Digitally Sign Communications (always)". My understanding is that SMB
currently doesn't support this although it will in a future release.

Be sure you either reboot or force GPOs to refresh.

Hope this helps! bill

 

[Franz Schenk]

Hi William

Thank you very much. It was exactly this setting "Microsoft client:
Digitally Sign Communications (always)" we have disabled, and we have now
access to the W2003 DC's from our Mac OS X clients.

best regards
Franz