Print Services for UNIX and Permissions

[Guest Anwar Mahmood]

Hi all,

 

I'm working on a project to integrate Macs to a predominantly Windows

Server 2003 Active Directory network.

 

In a test environment, I've joined an iMac to Active Directory and can

successfully logon with different Active Directory accounts.

 

I then want to print to network printers. This is most reliably

achieved using UNIX standards on the iMac and on the Windows Server

2003 box. So, I've installed Print Services for UNIX on the server,

created a printer and shared it.

 

I can create a printer on the iMac and print successfully to the

shared printer without problems.

 

However, if I then modify the default permissions, withdrawing the

Everyone entry from the Security tab list and only permitting

individual users to print, the permissions are enforced when I test

them using a Windows XP box, but not for the iMac. I've used the

Advanced>Effective Permissions feature to verify that the account is

indeed not entitled to print, but it still works.

 

I'm very puzzled by this behaviour. This is a runtime Windows Server

2003 SP2 x86-32 Standard server, patched to the hilt then promoted to

an AD DC. I've lowered one security setting relating to digitally

signed communications that is necessary for OS X to join an Active

Directory domain, but nothing else.

 

Anyone else encountered this?

 

Kindest regards,

 

Anwar