Identity Finder

Searching a Macintosh SMB Share with Identity Finder

[Nov 23, 2009 14:09] Web access to Microsoft Live@edu accounts now works.

In order to search a Macintosh remotely from a Windows computer running Identity Finder, the Mac's file sharing options must be configured properly. Please follow the instructions below to configure the Mac to be scanned.

Note: For users on internal UVa networks, both machines involved in the scanning must reside on the same network—e.g., both on the standard network or both on the More Secure Network.

Table of Contents

Enable SMB File Sharing

Mac OS X 10.5 “Leopard”

  1. Choose System Preferences... from the Apple menu.
  2. Click the Sharing icon in the Internet & Network section of the System Preferences window.
  3. If there is a closed padlock icon with the legend Click the lock to make changes, click the icon and enter a valid password to unlock the Sharing settings.
  4. Check On for the File Sharing service.
  5. Click Options... in the lower right-hand corner of the Sharing window.
  6. Check Share files and folders using SMB.
  7. Select the user to whom you wish to grant access, and authenticate for that user if requested.
  8. Click Done.
  9. Select  +  (Add) below the Shared Folders: box in the Sharing window.
  10. Select the folder you want to share, and click Add.

    Notes:

    • We recommend that you select the machine's hard drive from the Devices list on the left-hand side of the window in order to search all files on the machine. (This requires Administrator access.) If this is a multi-user machine and you only have access to a single home directory, select that home directory (house icon) in the Places list on the left-hand side.
    • If you chose the entire hard drive, by default three users should appear in the Users: box: System Administrator, Administrators and Everyone. If you chose a home directory, by default two users should appear in the Users: box: the owner of the home directory and Everyone.
    • If a group named Unknown user appears, delete it by selecting it and clicking  -  (Delete) below the Users: box; the Unknown user group allows anyone to access the indicated Shared Folder with the rights listed. On the other hand, Everyone is a group comprised of all existing user accounts on the system; it does not mean that someone without a local account can read the drive. The Everyone group cannot be deleted.
  11. Click Show All in the Sharing window title bar to display all System Preference panes.
  12. Click the Security icon in the Personal section of the System Preferences window.
  13. Select the Firewall tab.
  14. If there is a closed padlock icon with the legend Click the lock to make changes, click the icon and enter a valid password to unlock the Sharing settings.
  15. Select Set access for specific services and applications.
  16. Click Advanced....
  17. Uncheck Enable Stealth Mode and click OK.
  18. Click Show All in the Sharing window title bar to display all System Preferences panes.
  19. Click the Network icon in the Internet & Network section of the System Preferences window.
  20. Write down the Mac's IP address.
  21. Go to Scan the Mac, below.

Mac OS X 10.4 “Tiger”

  1. Choose System Preferences... from the Apple menu.
  2. Click the Sharing icon in the Internet & Network section of the System Preferences window.
  3. If there is a closed padlock icon with the legend Click the lock to make changes, click the icon and authenticate to unlock the Sharing settings.
  4. Click on the Services tab.
  5. Check On for the Windows Sharing service.
  6. Click Accounts....
  7. Check On for the desired account and authenticate for that account if requested.
  8. Click Done.
  9. Click on the Firewall tab.
  10. Click Advanced....
  11. Uncheck Enable Stealth Mode and click OK.
  12. Click Show All in the Sharing window title bar to display all System Preferences panes.
  13. Click the Network icon in the Internet & Network section of the System Preferences window.
  14. Write down the Mac's IP address.
  15. Go to Scan the Mac, below.

Scan the Mac

OS X 10.5 “Leopard” and OS X 10.4 “Tiger”

You can now mount the Mac as an SMB share from the Windows machine running Identity Finder. From the Windows machine:

  1. Right-click on My Computer.
  2. Select Map network drive...
  3. Type the IP address of the target machine in the format of \\ipaddress\share, where ipaddress is the address of the Mac that you wrote down earlier, and share is the Mac account name (Tiger or Leopard home directory share) or hard drive name (Leopard hard drive share).
  4. Click Finish.
  5. Enter user name and password when prompted.
  6. Within Identity Finder, click the Where To Search tab and click Custom....
  7. In the Identity Finder Personal Information File dialog box, click on the ellipsis to browse to the mounted SMB share, select it, and click Add.
  8. Run a scan on the mounted drive as you would a local drive.

Disable SMB Sharing

For security reasons, drive sharing should never be on without a specific reason. Once the scanning is complete, return the sharing configuration on the Mac to its previous state:

OS X 10.5 “Leopard”

  1. Disable file sharing if it was not previously enabled: in the Sharing preference pane, uncheck On for the File Sharing service.
  2. Remove any items from the Shared Folders: list: in the Sharing preferences pane, select each item and click  -  (Delete) below the Shared Folders: box and click OK.
  3. Remove any user accounts from the sharing list: click Options... in the lower right-hand corner of the Sharing preference pane, and uncheck all user accounts, authenticating as necessary.
  4. Re-enable stealth mode:
    • In the Security preference pane, select the Firewall tab, and click Advanced....
    • Check Enable Stealth Mode and click OK.

OS X 10.4 "Tiger"

  1. Disable any user accounts under Windows Sharing: in the Services tab with Windows sharing selected, click Advanced... and uncheck all user accounts, authenticating as necessary.
  2. Disable Windows Sharing if it was not previously enabled: in the Services tab, uncheck On for the Windows Sharing service.
  3. Re-enable Stealth Mode:
    • In the Firewall tab, click Advanced....
    • Check Enable Stealth Mode and click OK.

Some text in this document has been adopted with permission from Carnegie Mellon University.

© 2009 by the Rector and Visitors of the University of Virginia.

The information contained on the University of Virginia’s Department of Information Technology and Communication (ITC) website is provided as a public service with the understanding that ITC makes no representations or warranties, either expressed or implied, concerning the accuracy, completeness, reliability or suitability of the information, including warrantees of title, non-infringement of copyright or patent rights of others. These pages are expected to represent the University of Virginia community and the State of Virginia in a professional manner in accordance with the University of Virginia’s Computing Policies.