How to Install Microsoft Authentication on a Macintosh

Windows NT Advanced Server provides an installable component to validate users that are connecting to the Windows NT Advanced Server from a Macintosh. The Microsoft User Authentication Module (UAM) provides a more secure logon session by sending an encrypted password, rather than a straight text password, across the network.

The Authentication Module also allows users to specify a domain if they are members of more than one domain. In order to log on to a domain other than the one the Windows NT Advanced Server is currently a member of, the user would type <Domainname><Username> in the Name text box. Also, the domain that the user is logging on to must be a trusted domain of the Advanced Server computer.

To install the Microsoft User Authentication Module on a Macintosh workstation, do the following:

1.	From the Apple menu, select Chooser.
2.	Select AppleShare icon and the AppleTalk zone of the Windows NT Advanced Server computer.
3.	Select Windows NT Advanced Server, and then choose Guest or Registered User.
4.	Select Microsoft UAM Volume and then close the Chooser.
5.	From the Macintosh desktop, double-click Microsoft UAM Volume to open the window.
6.	Choose the AppleShare folder and drag it to the System Folder on the local hard disk.
7.	From Special menu, choose Restart.

Whenever a Macintosh user connects to a Windows NT Advanced Server, the user now has the option of using Standard Macintosh Authentication or Microsoft Authentication.

Windows 2000 Update

NOTE: The System Requirements are Macintosh Operating System 8.5 or higher. Macintosh Operating System versions previous to 8.5 require AppleShare 3.8. Previous versions of Apple Share work only with the MS-UAM 1.0 which do not work with Windows 2000. To install the MS-UAM 5.0 on a Macintosh Client do the following:

1.	From Mac Client, open Mac UAM Volume on the Windows 2000 Server.
2.	Copy the AppleShare Folder under the System Folder.
3.	Run the UAM installer from the Windows 2000 Server.

Note: The only password that can be sent to Volumes on Startup are clear text passwords. You can only use encrypted passwords after the Client Operating System has started.