Microsoft¿ Windows NT¬ Advanced Server Services for Macintosh Release Notes INSTALLATION OF THE MACINTOSH¿ WORKSTATION SOFTWARE AND QUICK REFERENCE FOR MACINTOSH USERSINSTALLING THE MACINTOSH WORKSTATION SOFTWAREThe following instructions describe how to install the Macintosh workstation software that provides secure logon to the Advanced Server.CaveatsBecause the Apple System¬ software up to version 7.1 does not fully supportcustom user authentication modules, Microsoft encourages you to install theMicrosoft Authentication file (MS UAM) only if you need increased securityon your Advanced Server.User AuthenticationA user authentication module (UAM) is a software program that prompts users foran account name and password before they log on to a server. Apple╒s Chooser has a standard UAM built-in, which uses the clear-text password method of security.Microsoft Authentication offers an additional level of security because itencrypts, or scrambles, a password so that it cannot be monitored as it issent over the network. If the system administrator for the Advanced Serverhas determined that encryption is an important security measure, you may beasked to use Microsoft Authentication when you log on to the server.Installing User AuthenticationFirst you log on to the Microsoft UAM Volume on the Advanced Server to accessthe MS UAM file. Then you drag this file to your AppleShare¿ Folder in your System Folder. Instructions follow. (International users, please see the"International Concerns" section later in these Release Notes beforeproceeding.)To gain access to the Microsoft Authentication files on the Advanced Server1. From the Macintosh Apple menu, select the Chooser.The Chooser dialog box appears.2. Select the AppleShare icon, and then the AppleTalk¿ zone in whichthe Advanced Server, which is running Services for Macintosh,resides. (Ask your system administrator if you're not sure of the zone.)3. From the list of file servers, select the Advanced Server.4. Choose the OK button.A sign-in dialog box appears.5. Choose the Registered User or Guest options, as appropriate.6. Choose the OK button.7. Select the Microsoft UAM Volume.8. Choose the OK button.9. Close the Chooser dialog box.To install the authentication files on the Macintosh workstation:1. From the Macintosh Desktop, double-click the Microsoft UAMVolume.2. Select the AppleShare Folder and drag it to the System Folder onyour hard drive.NoteIf the Macintosh workstation already has an AppleShare Folder inthe System Folder, you should not overwrite it because it maycontain other user authentication modules (UAMs), such as theNetWare« UAM. If you want to maintain the files in the originalAppleShare Folder, simply drag the MS UAM file to it.Now, when Macintosh users of this workstation connect to the AdvancedServer, they will be offered Microsoft Authentication.Known Problems1. For workstations running System 6.0.7 and 6.0.8:Problem: The Chooser will not work (it will crash) if you first mount oneMacintosh-accessible volume using the UAM, and then go back to the Chooserand try to mount another volume from the same server without dismountingthe first volume. If you do not dismount the first volume from the serverbefore mounting another one, you will have to restart the Macintoshworkstation. In summary, you can only mount one volume from a serverat a time, or you must mount all the volumes at one time.Workarounds:* Mount all the volumes you are going to use at one time.* If you have an AppleShare 3.0 server, install the AppleShare 3.0 client software on your workstation. (The problem is actually in the AppleShare 2.x client software, which ships with System 6.0.7 and 6.0.8).* Upgrade to System 7.* Don't use Microsoft Authentication when connecting to Advanced Servers from which you want to mount multiple volumes.2. For System 6.0.7, 6.0.8, and 7.0.1Problem: When logged in as a Registered User, your user name will not show upin the Sharing...dialog (Get Privileges...dialog in System 6). This is notserious, however, because it does not affect the permissions assigned tofiles and folders created by you on the Advanced Server. These willcorrectly reflect ownership by you.Workarounds: NoneInternational Concerns1. For Spanish System 7.0.1Problem: The version of AppleShare shipped with this version of the AppleSystems software will crash if you install the MS UAM files. Do not installthe Microsoft Authentication files if you are using System 7.01.2. Name of AppleShare FolderFor non-English versions of the AppleSystem software, you must create anAppleShare Folder with the correct, localized name. Here are the names of the AppleShare Folder in several supported languages:** Please post requests for international AppleShare folder names on the beta forum on Compuserve. ** Language Appleshare Folder Name Danish AppleShare-mappe Dutch AppleShare map Finnish AppleShare kansio French Dossier AppleShare German AppleShare Ordner Italian AppleShare Folder Norwegian AppleShare mappe Portuguese Pasta AppleShare Spanish Carpeta AppleShare Swedish AppleShare-mapp Turkish AppleShare KlasÜrƒQUICK REFERENCE FOR MACINTOSH USERSAs a Macintosh user, you can share files and folders with PC users by saving them to an Advanced Server that is running Services for Macintosh. You do this by mounting a Macintosh-accessible volume onto your desktop and saving the files and folders you want to share on it. (A Macintosh-accessible volume is a directory on the Advanced Server that has been designated as a volume that Macintoshes can use.) If you're sharing files with MS-DOS users, it's a good idea to name files and folders using the 8.3 standard (eight characters, followed by a period and a three-character extension) used by MS-DOS-based computers-for example, CHAPTER1.DOC. That way, MS-DOS users of shared files can easily find the file on the Advanced Server.For more information about sharing files and printing on an Advanced Server, see the Microsoft Windows NT Advanced Server Services for Macintosh manual and the Microsoft Windows NT Advanced Server System Guide. For general information about using the Macintosh, see your Macintosh user manuals.Logging on to an Advanced ServerLogging on to an Advanced Server running Services for Macintosh is much like logging on to any other server on the AppleTalk network. During this procedure, you will be asked to specify a logon method-either Apple Standard UAM (user authentication module) or Microsoft Authentication, which provides secure logon to the Advanced Server. Consult your system administrator if you are not offered Microsoft Authentication. Your system administrator may want you to install the files necessary to run it. (For more information, refer to earlier sections of this file.)About Privileges and PermissionsWhen you create a folder on a Macintosh, you can set access privileges for it. By setting privileges, you can determine who can see and change the folder and the files in it. You do this by selecting the folder and choosing Sharing from the Finder's File menu on your Macintosh. The access privileges you set on folders in Macintosh-accessible volumes are translated to Advanced Server-style permissions on the corresponding directory on the Advanced Server. Keep in mind that Windows NT-based users can set permissions (on files and folders), which are translated to access privileges. These access privileges affect your ability to use files and folders saved by PC users. So, if you're having trouble using a file on the Advanced Server, you may not have the necessary privileges. Consult the system administrator or the owner of the file to get the permissions you need. Troubleshooting HintsWhat if I can't find a volume?The volume might be configured as a private volume. A private volume is any volume in which the Owner, Primary Group, and Everyone categories have no access privileges-only the owner has permissions. Ask the owner or administrator to give you the permissions you need to use it.What if I can't find a folder or file?You may not have privileges to see the files or folders. Ask the owner or administrator to give you the privileges you need to use it.What if I forgot my password?Ask the system administrator to reset your password.What if I can't save a file with an 8.3 name?This name may already exist on the Advanced Server. Give the file a different filename. If MS-DOS users are going to need it, using the 8.3 standard makes it easier for them to identify. (A short name is automatically generated by the Advanced Server; however, it may not be as easily identifiable to users as one you create.) If no MS-DOS users are going to need the file, the filename can be as long as the Macintosh allows-31 characters.What if I can't find the Advanced Server running services for Macintosh?Ask your system administrator to help you.What if a PC user with whom I'm sharing files can't see the contents of a folder?The folder's owner needs to give the PC user both the See Files and See Folders access privileges (also called permissions from the Advanced Server).What if I can't mount a Macintosh-accessible volume using an alias?The volume may have a password, or you may have connected to the volume using Microsoft Authentication. If the volume has a password, you can mount the volume through the Chooser and then use the alias. Or you can specify that it be opened at system start-up time when you mount the volume.If you are using Microsoft Authentication to logon to the server, you must mount the volume through the Chooser and then use the alias.