Chapter 18 - Setting Up Services For Macintosh

Archived content. No warranty is made as to technical accuracy. Content may contain URLs that were valid when originally published, but now link to sites or pages that no longer exist.

This chapter describes what happens when you set up Services for Macintosh (SFM) on a computer running Windows NT Server. It explains how to set up SFM directly from the distribution disk and over the network, as well as how to remove it from the server. This chapter also includes instructions for setting up the encrypted password module, also called user authentication module (UAM), that runs on Macintosh clients connected to the network.

Note Before setting up SFM, become familiar with concepts such as AppleTalk internets, AppleTalk Phase 2, routing and seed routing, network numbers and ranges, and zones. Also, make a plan for your AppleTalk internet. If you aren't familiar with AppleTalk networking concepts, or if you don't yet have an internet plan, read Chapter 17, "Planning Your AppleTalk Network," before proceeding.


You can set up SFM at the same time you install Windows NT Server, or you can set it up later. To set up SFM, use the Network icon in Control Panel and the Windows NT Server distribution disk.

If you remove SFM and later decide to set it up again, you must use the Windows NT Server distribution disk and installation program to copy the required SFM files to the server. Removing SFM deletes the distribution files (except Macintosh-accessible volumes) instead of disabling them.

Note You must be an administrator or have administrator permissions to use the Network icon in Control Panel.

When you set up SFM, the following are automatically started or enabled: AppleTalk Protocol, File Server for Macintosh, and Print Server for Macintosh.

  • The AppleTalk Protocol is the layer of AppleTalk Phase 2 protocols that delivers data to its destination on the network. The AppleTalk Protocol can be configured through the Network icon in Control Panel. Configuration instructions for the AppleTalk Protocol appear in Chapter 19, "Configuring Services for Macintosh."

  • File Server for Macintosh (also called MacFile) allows you to designate a directory as a Macintosh-accessible volume, ensures Macintosh filenames are legal NTFS names, and handles permissions. When set up, File Server for Macintosh commands appear in Windows NT Server File Manager and Server Manager under the MacFile menu. Instructions for configuring it appear in Chapter 19, "Configuring Services for Macintosh."

  • Print Server for Macintosh (also called MacPrint) allows all network users to send print jobs to a spooler on the Windows NT Server and continue working; they need not wait for their print jobs to complete. Windows-based users can also review the print jobs in the Printers folder. See Chapter 20, "Setting Up Printers," for more information.

In addition, setting up SFM creates a Control Panel icon that gives you the same server administration capabilities as the MacFile menu (excluding volume management) for the local computer.

Setting Up from Windows NT Server

After Windows NT Server is installed, use the Network icon in Control Panel and the Windows NT Server distribution disk to set up SFM.

To set up Services for Macintosh 

  1. In Control Panel click Network

  2. In the Services tab, click Add

  3. From the Network Service list, select Services for Macintosh and click OK

  4. Type the path to the Windows NT Server distribution files. 

    Setup copies all SFM files and sets up the Registry. 

  5. In the Network dialog box, click Close

    The AppleTalk Protocol Configuration dialog box appears. Use it to select a new zone, a different network, or to enable AppleTalk routing, as desired. See online Help for more information. 

  6. Click OK, or click Cancel if you do not want to change the configuration.

You must restart your computer for the changes to take effect.

Setting Up from the Network

Setting up over the network can save time if you need to set up SFM on multiple Windows NT Server computers. SFM is set up over the network just as any other service: Simply type the path to the files. This path can be a network drive or a universal naming convention (UNC) name such as \\server1\ntfiles. For more information, refer to the Windows NT Server Concepts and Planning Guide.

Setting Up for Remote Administration

You can set up the administrative tools on any Windows NT computer so that you can administer SFM remotely from a Windows NT clients.

Refer to the Windows NT Resource Kit for information on setting up administrative tools on Windows NT computers.

Stopping and Removing Services for Macintosh

After you have set up SFM on a server, you can remove it at any time. For example, you might want to move your SFM installation to another server. When you remove SFM, all SFM files are deleted from the server's hard disk, except some program files that are in use. (The files in use will be reworked when the system is rebooted.)

Before you remove SFM, use the Devices icon in Control Panel to stop the services. If the services are running, removing will delete only the registry entries.

To stop the services 

  1. In Control Panel click Devices. 

  2. From the Device list, select AppleTalk Protocol and click Stop

  3. Click OK to stop the AppleTalk Protocol and the Print and File Servers for Macintosh. After the devices have stopped, click Close

    Now you're ready to remove SFM. 

To remove Services for Macintosh 

  1. In Control Panel click Network. 

  2. In the Services tab, select Services for Macintosh and click Remove

  3. Click Yes to confirm that you want to remove the SFM files from the computer running Windows NT Server. 

  4. Click OK.

The AppleTalk Protocol and the File and Print Servers for Macintosh will be deleted; services will be removed. Note that removal makes all volumes unavailable to the Macintosh users, but it does not delete them; in other words, the volumes will revert to directories.

Setting Up the Services for Macintosh Client Software

Microsoft authentication is an AppleShare extension that provides a more secure logon session to a computer running Windows NT Server. It encrypts passwords and stores them on the computer running Windows NT Server. You can either set up, or instruct Macintosh users to set up, the authentication file on their Macintoshes by means of the network.

With Microsoft authentication, users can also specify a domain when they log on or change their passwords. So, if they have an account in several domains, the right one will be used. (To do this, users type domainname**\**username in the Name box.)

To gain access to the authentication files 

  1. From the Macintosh Apple menu, select the Chooser. 

    The Chooser dialog box appears. 


  2. Select the AppleShare icon, and then the AppleTalk zone in which the computer running Windows NT Server resides. 

  3. From the list of file servers, select the name of the Windows NT Server. 

  4. Click OK

    A sign-in dialog box appears. 


  5. Choose the Registered User or Guest option button, as appropriate. 

  6. Click OK

    A server dialog box appears. 


  7. Select the Microsoft UAM Volume. 

  8. Click OK

  9. Close the Chooser dialog box. 

To install the authentication files on the Macintosh client 

  1. From the Macintosh Desktop, double-click the Microsoft UAM Volume to open it. The Microsoft UAM Volume window appears. 


  2. Select the AppleShare Folder and drag it to the System Folder on your hard disk. 

    Note If the Macintosh client already has an AppleShare Folder in the System Folder, a message will ask if you want to overwrite the folder. Do not overwrite it because it might contain other UAMs (such as the NetWare® UAM). To maintain the files in the original AppleShare Folder, simply open the AppleShare Folder in the Microsoft UAM Volume, and drop the MS UAM file into your existing AppleShare Folder in your System Folder.

Now, when the Macintosh user connects to the computer running Windows NT Server, authentication will be offered as shown in the following dialog box:


How this is done depends on the Macintosh system the user is running. If a Macintosh is running System 7.1 or later and the clear-ext and guest options are disabled at the server level, the user will be given only one choice: Microsoft Authentication. Earlier systems will show both choices: Microsoft Authentication and clear-text password protection in the form of the Apple standard UAMs, even if the cleartext and guest logon options have been disabled and are unavailable to clients.

Setting Up Buttons on the File Manager Toolbar

If you use SFM frequently, you might want to customize the File Manager toolbar to include SFM buttons. To make room for the SFM buttons, you might need to remove separators (spaces between the buttons) or other buttons.

The SFM buttons available for setup include the following commands: Create Volume, Remove Volumes, and Permissions, which are available on the MacFile menu in File Manager.

From File Manager, use the Options menu and the Customize Toolbar command to make changes to the Toolbar. For more information about customizing the Toolbar, refer to online Help.

Choosing a Zone After Setup

After setting up SFM and rebooting, you can choose a zone for SFM. For more information, refer to Chapter 19, "Configuring Services for Macintosh."