Andrew Windows Client Configuration

Overview: Andrew Windows and Microsoft Active Directory

Andrew Windows is Computing Services' supported Active Directory infrastructure. Active Directory is the Windows directory service. A directory service is a network service that stores information about network resources and makes the resources accessible to users and applications. Directory services provide a consistent way to name, describe, locate, access, manage and secure information about these resources.

This document provides information on Client configuring for File and Printer Service to a member server in Andrew Windows. Use this guide to assist you in setting up your computer to connect to a Member Server in the Andrew Windows environment using your Andrew user ID.

Windows Client Connect Licensing

The Windows client connect license for file and printer sharing to a Windows Server is covered under the Microsoft Campus License Agreement.

Support for Windows File and Printer Sharing

Computing Services will not provide support for Windows File and Printer Sharing. This document should be used as a guide to configure your computer. Your Departmental Computer Administrator will provide any additional support.

Policies and Guidelines

Carnegie Mellon Computing Services has adopted specific policies and guidelines that apply to the campus-computing environment. It's necessary that you abide by these guidelines in order to avoid possible fines or loss of network services. Review these guidelines at http://www.cmu.edu/computing/guideline.

Active Directory Password Reset Service

If you are on a computer running Macintosh OS X, you will need to reset your Microsoft Active directory password before accessing a file or printer share from member servers in the Andrew.ad.cmu.edu domain.

The Active Directory Password Reset tool was developed as an interim solution to provide authentication to non-Kerberos down-level clients including Macintosh OS 9 for access to file and print services. Since this service is a temporary service, its' use should be limited to the above-mentioned scenarios. We strongly recommend that departments migrate their users to Kerberos compatible clients such as Windows XP and Macintosh OS X.

If you intend to use this authentication channel for other purposes (e.g., KDC trusts, IIS Services, SQL server, etc.) please contact Computing Services to examine other alternatives. It is the intent of Computing Services to eliminate this service as soon as acceptable alternatives are deployed, and we actively discourage the reliance upon this authentication method for departmental infrastructure initiatives.

Reset your Active Directory Password at http://www.cmu.edu/computing/andrew-windows/pw/password-reset.html.

Client Configuration and Logon Instructions

Following are the Client Configuration and Logon instructions for:

• Non-Andrew Windows XP
• Andrew Windows XP
• Macintosh OS X

Non-Andrew Windows XP

Client Configuration Instructions

1. Configure your network settings using the Connecting to the Campus Network documentation.
2. Install and Configure the Client for Microsoft Networks.

Logon Instructions

1. Set a password for your Active Directory User Account using the Andrew Password Reset Tool available at http://www.cmu.edu/computing/andrew-windows/pw/.
2. Select Start > Run.
3. Type the UNC for your network share using the server's fully qualified host name. Click OK.
   Example: \\myservername.andrew.ad.cmu.edu\mysharename
4. When prompted for your username and password, type "andrew\<your userID>" and Active Directory Password.

Andrew Windows XP

Client Configuration Instructions

1. Configure your network settings using the Connecting to the Campus Network documentation.
2. Install and Configure the Client for Microsoft Networks.
3. Join the computer to the Andrew.ad.cmu.edu domain.

Logon Instructions

1. Log onto your Computer using your Andrew username and password. You must select the Andrew.CMU.EDU (Kerberos Realm) option from the Log on to drop-down menu.
   Note: Click Options if the Log on to option is not displayed.
2. Select Start > Run.
3. Type the UNC for your network share using the server's fully qualified host name. Click OK.
   Example: \\myservername.andrew.ad.cmu.edu\mysharename

Macintosh OS X

Client Configuration Instructions
No further configuration is required after completing the configuration instructions that apply to your connection type.

• Connecting to the Campus Network

Logon Instructions

1. Set a password for your Active Directory User Account using the Andrew Password Reset Tool available at http://www.cmu.edu/computing/andrew-windows/pw/
2. In the Finder, use the Go menu and select Connect to Server.
3. Type the full server's hostname, including the share folder on the server. You can connect using either the smb:// protocol or the cifs:// protocol.
   OR
   Once the computer has been found on the network, the SMB/CIFS File System Authentication dialog box is displayed. Type your Domain, UserID and your Active Directory password and click OK.