Mailing Lists: Apple Mailing Lists

Image of Mac OS face in stamp
 
[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

Re: Re:Word 6. allows access to others +



email@hidden writes:
>"Misery loves company" so I was delighted to see this post. We just found
>the exact same problem with network browsers,
>Appleworks, Hyperstudio and any other program that gives browser access.
>I am glad that you found an answer, you make it
>sound simple. I have a call into many Apple support people and so far no
>one has suggested that the answer is that simple.
>What exactly did you do? I have the network shut down right now and need
>a secure solution.

The good news is I believe MM 2.0 with OS X server will solve this problem
for next fall. For now, here is what I did to protect user folders from
prying eyes in the meantime...

1. Make sure that all users have logged in at least once. I did this by
comparing my list of users with the folders in the Users folder on the
document folder. If someone has never logged in, log them in to create a
user folder for them. This step isn't absolutely necessary but it avoids
a bigger solution or problems later.

2. On your Appleshare Document server, use Mac OS Server Admin (MOSSA) to
activate the users in AppleShare (they will turn from grey to coloured
icons)

3. Create an AppleShare group that contains all the users that have
documents on the same sharepoint, for this example let's call it "AS Users
1". (Duplicate this step for the number of document sharepoints using AS
Users 2, etc) I have 1200 students groups into 250 users per sharepoint.

4. Create another AppleShare group called "Owners" that contains the
Multiple Users User and the owner of the server, and anyone else you want
to have access to everything.

5. On the Document sharepoint for each group, set privileges as follows:
Owner: "Owners" with R/W access
User/Group: "AS Users 1" with R access
Everyone: no access

6. Inside that folder is the Users folder for that sharepoint. Set the
privileges as follows:
Owner: "Owners" with R/W access
User/Group: "AS Users 1" with R access
Everyone: no access

7. Run Jon's Applescript (edit the path name first) that sets the
individual user folders to have the following privileges:
Owner: "Owners" with R/W access
User/Group: "Individual User" with R/W access
Everyone: no access

Using the Okey Dokey Pro control panel to automatically press the Save
button for each user will save your sanity!

8. Change Macintosh Manager to log into users folders trying AFP name and
password first.

I think I have all the steps here. This is not my invention, I have
gleaned this info from several different people on this list. If I have
missed anything, let me know. (My setup is working but I may have
forgotten an instruction)


References: 
 >Re:Word 6. allows access to others + (From: Sharon Lewallen <email@hidden>)



Visit the Apple Store online or at retail locations.
1-800-MY-APPLE

Contact Apple | Terms of Use | Privacy Policy

Copyright © 2007 Apple Inc. All rights reserved.