Previous Page | Next Page

  1. Introduction
  2. Installation
  3. Hardware Issues
  4. Filesystems
  5. Networking
  6. Security
  7. Servers
  8. Services
  9. Utilities
  10. Control Panel
  11. Printing
  12. Performance Monitor
  13. Network Monitor
  14. Event Viewer
  15. Other Issues
  16. User Accounts
  17. Groups
  18. Policies
  19. User Rights
  20. Auditing
  21. System Policies
  22. Sharing
  23. Profiles
  24. Roaming Profiles
  25. Domains
  26. Server Management
  27. Directory Replication
  28. License Management
  29. Client Administrator
  30. Netware Tools
  31. Macintosh Support
  32. RAS Server
  33. SNMP
  34. DHCP
  35. DNS
  36. WINS
  37. Mail Service
  38. Internet
  39. Internet Information Server
  40. Routing and Firewalls
  41. Items to Remember
  42. Terms
  43. Credits

Windows NT Macintosh Support


The NTFS file system supports Macintosh's Hierarchial File system (HFS) by storing icons, fonts, window positions, and more. Services for Macintosh supports this functionality. NT Requirements are an NT server with:

  • 2M of disk space.
  • An NTFS partition.

Macintosh requirements:

  • System 6.0.7 or later.
  • AppleTalk Phase 2.

Only print services for Macintosh are available on a FAT file system. Macintosh XL and 128 computers are not supported since they do not use the Appleshare networking software.

Macintosh Characteristics

Macintosh computers may use LocalTalk, TokenTalk, FDDITalk, or EtherTalk to talk at the data link layer of the network. Using EtherTalk is the best solution to connecting to apple computers on ethernet. However if this is not an option, a router may be used to connect the LocalTalk and EtherTalk sides.

The Macintosh "Chooser" is how Macintosh accesses resources on the network. The MacIntosh "Chooser" function requires the filesystem to support both data forks and resource forks. FAT filesystems only support data forks. Macintosh file names can be up to 32 characters in length. Therefore Macintosh cannot access file names created on the NT environment that are longer than 32 characters but NT autogenerates 8.3 length file names to overcome this problem.

Services for Macintosh Benefits

The installation of this service will modify Server Manager and File Manager (WinFile). These two programs can then be used to create Macintosh accessable volumes.

  • Can provide services to Macintosh PostScript printers on Macintosh clients for Windows clients sending PostScript jobs
  • Allows Macintosh clients to send PostScript print jobs to non PostScript printers on the NT server.
  • Allows Macintosh clients to share files on NT servers.
  • Supports AppleTalk routing.
  • Supports AppleTalk and AppleShare.
  • Support Macintosh file names.
  • Allows Macintosh applications to recognize PC file extensions using extension mapping.

Services for Macintosh Installation and configuration

  1. Installation:
    1. Bring up the networking applet from the control panel or by right clicking on network neighborhood and selecting properties.
    2. Select the services tab, and "Add", selecting "Services for Macintosh" from the list.
    3. Select where the installation files are. Normally they are on \i383 on the installation CDROM. Click Close.
    4. Click OK after the binding analysis is done. When done, restart the computer.
    5. A new control panel applet called "MacFile" will now exist and the "Services" applet in the control panel will now contain "File server for Macintosh" and "Print server for Macintosh".
  2. Configuration:
    1. Create shares accessible by Macintosh by running the "Server Manager" from administrative tools.
    2. Select "Macfile", and "volumes", then select "Create Volume" and enter a name and path for the volume.

The control panel MacFile applet allows monitoring and management of Macintosh users and volumes.

Services for Macintosh (SFM) supports file sharing, printing, and routing.

File Sharing

The AppleTalk Filing Protocol (ATP) on a NT server allows Macintosh clients to use NT file sharing. Macintosh volumes may be created using Server Manager, File Manager, and possibly MacFile which runs out of the File Manager (depending on who you ask). The following properties can be associated with Macintosh accessible volumes:

  • A user limit
  • Guest Access
  • Volume Password


NT supports printing for all clients by allowing any client to print to any printer so long as proper permissions are set. An AppleTalk printer driver must be installed for printers to be used by Macintosh clients along with the AppleTalk print monitor. Services for Macintosh can provide services to Macintosh PostScript printers on Macintosh clients for Windows clients sending PostScript jobs. It also allows Macintosh clients to send PostScript print jobs to non PostScript printers on the NT server.


Services for Macintosh can support AppleTalk protocol routing for Macintosh. Macintosh uses RIP dynamic routing protocol. AppleTalk networks have numbers and there can be up to 254 hosts per network number. On Macintosh networks a seeded router is configured with (required to route):

  1. network numbers
  2. zone information.

WinFile Utility

This is also known as "File Manager". This utility is started from the command line using "Start", "Run", and entering "Winfile". This utility is used to create a Macintosh acceptable volume, assign permissions, and create shares for Macintosh clients. Text boxes include:

  • Volume Name
  • Path
  • Password - Any user accessing the volume must know this password.
  • Confirm Password

Check boxes are:

  • This volume is read only
  • Guests can use this volume

Another option is user limit which can be unlimited or set to a number of users. There is also a permissions button allowing user permissions to the volume to be set. These permissions are Macintosh permissions and are more restrictive than NT permissions. Remember that Macintosh volumes cannot be nested within each other. Macintosh volumes have a primary group associated with them that can be specified using "User Manager for Domains". Also the primary group is accessable in the Directory permissions box.

Macintosh Shares and Security

User Limits, volume passwords, and guest access may be associated with Macintosh volumes. Shares cannot be setup within already shared directories on Macintosh systems. Macintosh allows the following security settings.

  • See files - Read
  • See folders - Write
  • Make changes - Write and Delete


After Services for Macintosh is installed the MacFile applet is available in the control panel. It is used to configure Macintosh user's logon environment and access to the NT files. It configures the server name for Macintosh users and the logon message for Macintosh clients. It contains the following usage summary:

  • Active AppleTalk Sessions
  • Open File Forks
  • File Locks

The following buttons are included:

  • Users - Opens the Macintosh users dialog box showing connected users and their resource use. This includes the username, name of the computer they are connecting from, the number of open files, how long they have been on, the volumes being used by all users and more.
  • Volumes - Used to see users accessing a particular volume.
  • Files - Used to determine access to specific files
  • Attributes - Can specify a greeting for Macintosh clients along with control of session and security information. Checkbox options are
    • Allow Guests to Logon
    • Allow Workstations to Save Password - Not recommended for high security. Allows the NT password to be saved on the Macintosh and the login screen will not appear.
    • Require Microsoft Authorization - If not selected, clear text passwords are sent. Microsoft User Authentication software for Macintosh must be copied to the Macintosh computer to use this option.
    Radio button options limit the sessions to a specific number or unlimited.

Macintosh File Association

There is an "Associate" dialog box accessable by choosing MacFile from the File Manager utility program.

AppleTalk Networks

Two types:

  • Phase 1 - Supports 254 nodes on a subnet.
  • Phase 2 - Supports Ethernet, LocalTalk, Token Ring, and FDDI networks. Only Phase 2 is supported by Microsoft's Services for Macintosh.

A appletalk zone is similar to a Windows domain. EtherTalk and TokenTalk networks may have multiple zones while a LocalTalk network may only have one zone. Computers may be moved from one zone to another. A network number is a range of addresses assigned to the Macintosh network.