Apple Mac OS X Server Print Service Administration For Version 10.4 or Later Manuale Utente

Mac OS X ServerUser ManagementFor Version 10.4 or Later

10 Contents183 Editing Preference Values for an Application183 Removing Preference Values With the Preferences EditorChapter 10 185 Managing Network V

100 Chapter 5 Setting Up Group Accounts

6 1016 Setting Up Computer ListsThis chapter tells you how to set up and manage groups of computers.About Computer ListsA computer list comprises

102 Chapter 6 Setting Up Computer Lists To edit computer lists or computer list preferences, you must have domain administrative privileges. You ca

Chapter 6 Setting Up Computer Lists 103 7 To add a computer to the list, click the Add (+) button and enter the computer’s Ethernet address and nam

104 Chapter 6 Setting Up Computer Lists After you create a preset, you can no longer change its settings, but you can delete it or change its name.

Chapter 6 Setting Up Computer Lists 105 6 Click the Add (+) button and enter the requested information.Or click the Browse (...) button, select the

106 Chapter 6 Setting Up Computer Lists To select the list, click the small globe above the accounts list and choose the directory domain that cont

Chapter 6 Setting Up Computer Lists 107 Searching for Computer ListsWorkgroup Manager has a search feature that allows you to find specific compute

108 Chapter 6 Setting Up Computer Lists To set up managed preferences, select “Define Guest Computer preferences here.” If you select this option,

Chapter 6 Setting Up Computer Lists 109 To reserve a set of computers for specific groups:1 In Workgroup Manager, click Accounts.2 Select the compu

Contents 11202 Users Can’t Open Files203 Users Can’t Add Printers to a Printer List203 Login Items Added by a User Don’t Open203 Items Placed in the D

110 Chapter 6 Setting Up Computer Lists Do not set the cache refresh to '0' or else the cache will not be created. This will result in th

7 1117 Setting Up Home DirectoriesMac OS X uses the home directory—a folder for a user’s personal use—to store system preferences and managed set

112 Chapter 7 Setting Up Home Directories The maximum path length of limit of 89 characters for home directories and other automount share points i

Chapter 7 Setting Up Home Directories 113 When a user logs in, he or she is authenticated using an account stored in a shared directory domain on t

114 Chapter 7 Setting Up Home Directories To open a directory domain, click the small globe above the accounts list and choose from the pop-up menu

Chapter 7 Setting Up Home Directories 115 4 In Workgroup Manager, click Accounts and select the user account you want to work with. To select a loc

116 Chapter 7 Setting Up Home Directories To create a network home directory in an AFP or NFS share point:1 Make sure the share point exists on the

Chapter 7 Setting Up Home Directories 117 Creating a Custom Home DirectoryIn Workgroup Manager, you can customize a user’s home directory settings.

118 Chapter 7 Setting Up Home Directories 6 Click the Add (+) button to add a custom home directory location, or click the Duplicate (copy icon) bu

Chapter 7 Setting Up Home Directories 119 Setting Up an Automountable AFP Share Point for Home DirectoriesYou can use Workgroup Manager to set up a

12 Contents

120 Chapter 7 Setting Up Home Directories In Server Admin, make sure AFP guest access is enabled. Connect to the home directory server and select A

Chapter 7 Setting Up Home Directories 121 Click Remove to remove the selected address from the list.10 Set up share point permissions. Select “Map

122 Chapter 7 Setting Up Home Directories Defining Default Home Directories by Using PresetsYou can define default home directory settings to use f

8 1238 Client Management OverviewThis chapter provides an introduction to Mac OS X client management.Client management is the centralized adminis

124 Chapter 8 Client Management Overview Using Network-Visible ResourcesMac OS X Server lets you make various resources visible throughout your net

Chapter 8 Client Management Overview 125 • Other shared folders. You can set up other folders on the server to provide network user access to appli

126 Chapter 8 Client Management Overview The Power of PreferencesMany preferences, such as Dock and Finder preferences, are used to customize the a

Chapter 8 Client Management Overview 127 Levels of ControlYou can define preferences for user accounts, group accounts, and computer lists that are

128 Chapter 8 Client Management Overview Suppose you select Left as the Dock’s position on the screen for Workgroup A, but you select Bottom for th

Chapter 8 Client Management Overview 129 Degrees of PermanenceWhen you define preferences, you choose to manage them Always or Once; they are Never

13PrefaceAbout This GuideThis guide tells you how to use Workgroup Manager to set up and manage home directories, accounts, preferences, and set

130 Chapter 8 Client Management Overview Designing the Login ExperienceYou can set up Login preferences for computer lists to control the appearanc

Chapter 8 Client Management Overview 131 To log in, a user selects his or her login name in the list (if the login window is set up this way), then

132 Chapter 8 Client Management Overview Caching PreferencesPreferences can be cached on Mac OS X computers, so they remain in effect even when the

Chapter 8 Client Management Overview 133 Installing and Booting Over the NetworkThe key to fast initial setup of multiple user computers and rapid

134 Chapter 8 Client Management Overview Day-to-Day Client AdministrationAdministering networked computers entails record keeping, help desk operat

9 1359 Managing PreferencesThis chapter provides information about managing preferences for users, workgroups, and computers.How Workgroup Manage

136 Chapter 9 Managing Preferences Managing PreferencesIn Workgroup Manager, information about users, groups, and computer lists is integrated with

Chapter 9 Managing Preferences 137 The cached preferences can help you manage local user accounts on portable computers even when they’re not conne

138 Chapter 9 Managing Preferences Updating the Preference Cache ManuallyWhen you need to, you can manually update the managed preferences cache fo

Chapter 9 Managing Preferences 139 6 Select preference settings or fill in information you want to use.Some management settings are not available f

14 Preface About This Guide • User information. You can enter and edit personal data for each user, such as his or her address, phone numbers, iCha

140 Chapter 9 Managing Preferences 3 Click the Computer Lists button and select one or more computer lists.If you are setting preferences for the G

Chapter 9 Managing Preferences 141 5 Click a button to display the pane containing the preference settings you no longer want to manage.In some cas

142 Chapter 9 Managing Preferences 4 Click Applications.5 Set the management setting to Always.6 Select either “User can only open these applicatio

Chapter 9 Managing Preferences 143 To manage access to helper applications:1 In Workgroup Manager, click Preferences.2 Make sure the right director

144 Chapter 9 Managing Preferences Managing Classic PreferencesClassic Preferences are used to set Classic startup options, select the Classic Syst

Chapter 9 Managing Preferences 145 8 Select “Warn at Classic startup” to show an alert dialog when Classic starts only after a user attempts to ope

146 Chapter 9 Managing Preferences Allowing Special Actions During RestartIf managed users have access to the Classic System preference, they can c

Chapter 9 Managing Preferences 147 To hide or show items in the Apple menu:1 In Workgroup Manager, click Preferences.2 Make sure the right director

148 Chapter 9 Managing Preferences Maintaining Consistent User Preferences for ClassicOrdinarily, Classic looks for an individual user’s data for M

Chapter 9 Managing Preferences 149 To switch directories, click the small globe above the accounts list. If you are not authenticated, click the lo

Preface About This Guide 15 Using Onscreen HelpIf you want to work with accounts, change preference settings, set up new home directories, or do an

150 Chapter 9 Managing Preferences 5 Click Dock.6 Click Dock Items.7 Select a management setting (Once or Always).If you select Once, the group fol

Chapter 9 Managing Preferences 151 Preventing Users From Adding or Deleting Items in the DockOrdinarily, users can add items to their own Docks, bu

152 Chapter 9 Managing Preferences To switch directories, click the small globe above the accounts list. If you are not authenticated, click the lo

Chapter 9 Managing Preferences 153 To switch directories, click the small globe above the accounts list. If you are not authenticated, click the lo

154 Chapter 9 Managing Preferences To show battery status in the menu bar:1 In Workgroup Manager, click Preferences.2 Make sure the right directory

Chapter 9 Managing Preferences 155 Managing Finder Preferences You can control various aspects of Finder menus and windows. The table below summari

156 Chapter 9 Managing Preferences 6 If you select Always, you can select either “Use normal Finder” or “Use Simplified Finder to limit access to t

Chapter 9 Managing Preferences 157 Select Computer to show the top-level directory, which includes local disks and mounted volumes.7 Select “Always

158 Chapter 9 Managing Preferences Controlling User Access to Remote ServersUsers can connect to a remote server by using the “Connect to Server” c

Chapter 9 Managing Preferences 159 To switch directories, click the small globe above the accounts list. If you are not authenticated, click the lo

16 Preface About This Guide Mac OS X Server Print Service Administration for Version 10.4 or LaterHost shared printers and manage their associated

160 Chapter 9 Managing Preferences 3 Select one or more users, groups, or computer lists.4 Click Finder.5 Click Commands and set the management set

Chapter 9 Managing Preferences 161 6 Click Desktop View.7 Drag the slider to adjust icon size.8 To keep items aligned in rows and column, select “S

162 Chapter 9 Managing Preferences If you select “Calculate folder sizes,” the computer calculates the total size of each folder shown in a Finder

Chapter 9 Managing Preferences 163 Setting Web Browser PreferencesUse web settings in Internet preferences to specify a preferred web browser and a

164 Chapter 9 Managing Preferences Scripts, Login Window and Options can be managed for computers only, not for users or groups. The following rele

Chapter 9 Managing Preferences 165 10 When you have finished selecting managed login settings, click Apply Now.Opening Items Automatically After a

166 Chapter 9 Managing Preferences Providing Access to a User’s Network Home DirectoryThis setting is used primarily for mobile accounts. When a us

Chapter 9 Managing Preferences 167 6 Click Login Items.7 Set the management setting to Always.8 Select “Add group share point.”9 Select the newly a

168 Chapter 9 Managing Preferences Using Hints to Help Users Remember PasswordsYou can use a “hint” to help users remember their passwords. After t

Chapter 9 Managing Preferences 169 6 Select “Enable Fast User Switching” to allow users to use this feature. Deselect this option to disable it.7 C

Preface About This Guide 17 Getting Additional InformationRegardless of your server administration experience, this resource may be of interest:App

170 Chapter 9 Managing Preferences 2 Optionally set the key “MCXScriptTrust” in ~root/Library/Preferences/com.apple.loginwidow.plist to a valid TRU

Chapter 9 Managing Preferences 171 To switch directories, click the small globe above the accounts list. If you are not authenticated, click the lo

172 Chapter 9 Managing Preferences To switch directories, click the small globe above the accounts list. If you are not authenticated, click the lo

Chapter 9 Managing Preferences 173 5 Select the specific type of proxy you want to configure, (FTP, Web, and so on).6 Specify a URL and port of the

174 Chapter 9 Managing Preferences Preventing Users From Modifying the Printer ListYou can prevent a user from changing the list of available print

Chapter 9 Managing Preferences 175 7 If don’t want users to access local printers, deselect “Allow printers that connect directly to the user’s com

176 Chapter 9 Managing Preferences 7 Select a printer in the User’s Printer List, then select “Require an administrator password.”8 Click Apply Now

Chapter 9 Managing Preferences 177 3 Select one or more users, groups, or computer lists.4 Click System Preferences.5 Set the management setting to

178 Chapter 9 Managing Preferences 3 Select one or more users, groups, or computer lists.4 Click Universal Access.5 Click Seeing, then select a man

Chapter 9 Managing Preferences 179 Adjusting Keyboard ResponsivenessIf users have difficulties pressing multiple keys at once, you can use the Stic

18 Preface About This Guide If You’re an Experienced Server AdministratorFor more information, consult these resources:Read Me documents—important

180 Chapter 9 Managing Preferences Adjusting Mouse and Pointer ResponsivenessIf users have difficulties using a mouse or prefer not to use a mouse,

Chapter 9 Managing Preferences 181 5 Click Options, then select a management setting (Once or Always).6 Select Allow Universal Access Shortcuts.7 C

182 Chapter 9 Managing Preferences Preference manifests may be stored in application bundles (in /Contents/Resources) or they may be standalone fil

Chapter 9 Managing Preferences 183 Editing Preference Values for an ApplicationA well behaved application should respect the settings in a preferen

184 Chapter 9 Managing Preferences

10 18510 Managing Network ViewsThis chapter provides information about managing the network resources that users can view and access.Using manage

186 Chapter 10 Managing Network Views • Default view. A view named Default is visible on a client computer if the directory in which the view is st

Chapter 10 Managing Network Views 187 8 Set up client computer settings for the view using the Settings pane.For instructions, see “Defining Use of

188 Chapter 10 Managing Network Views To change the view a computer sees, select the computer and click the Edit button. Select a view from the Net

Chapter 10 Managing Network Views 189 Deleting Neighborhoods From Managed Network ViewsDeleting neighborhoods from a managed network view removes t

1 191 User Management OverviewThis chapter introduces important user management concepts and describes the applications you’ll use to manage acco

190 Chapter 10 Managing Network Views To add a computer to a network view:1 Open Workgroup Manager, and click Network.2 Click the small globe above

Chapter 10 Managing Network Views 191 4 In the Network Views list, select the view you want to work with.5 In the Layout pane, select the computer

192 Chapter 10 Managing Network Views Deleting Dynamic Lists From Managed Network ViewsDeleting a dynamic list from a network view removes it from

Chapter 10 Managing Network Views 193 If a network view matching one of these criteria is found, the computer uses that view and stops searching. B

194 Chapter 10 Managing Network Views 7 To assign the view to a computer in a new computer record, click the Add (+) button and choose New Computer

Chapter 10 Managing Network Views 195 7 To delete the network view, choose Server > Delete.8 To remove a view from a computer record, use the Se

196 Chapter 10 Managing Network Views

11 19711 Solving ProblemsIf you encounter problems as you work with Workgroup Manager, you may find a solution in this chapter.Online Help and th

198 Chapter 11 Solving Problems 5 Click Preferences, click Login, and click Login Window.6 Select “List of users able to use these computers” and “

Chapter 11 Solving Problems 199 Users Can’t Log In or AuthenticateTry these techniques to determine whether the source of the authentication proble

K Apple Computer, Inc.© 2005 Apple Computer, Inc. All rights reserved. The owner or authorized user of a valid copy of Mac OS X Server software ma

20 Chapter 1 User Management Overview When Workgroup Manager is used in conjunction with other Mac OS X Server services, you can: • Connect users

200 Chapter 11 Solving Problems Users Relying on a Password Server Can’t Log InIf your network has a server with Mac OS X Server version 10.2, it c

Chapter 11 Solving Problems 201 A Mac OS X User in Shared NetInfo Domain Can’t Log InThis problem occurs when a user tries to log in to a Mac OS X

202 Chapter 11 Solving Problems 4 Rejoin the server to the Open Directory master for single sign-on and Kerberos authentication.For detailed instru

Chapter 11 Solving Problems 203 For example, suppose the default application for viewing PDF files is Preview. A user logs in and double-clicks a P

204 Chapter 11 Solving Problems A User’s Dock Has Duplicate ItemsWhen you use Workgroup Manager to set up the same Dock item preferences for more t

205AppendixAA Importing and Exporting Account InformationAppendix A provides guidelines for importing and exporting account information.Several

206 Appendix A Importing and Exporting Account Information The only attribute that a record must have is the record name.Note: You will need to re

Appendix A Importing and Exporting Account Information 207 4 Optionally, you can define a user account preset in the server’s LDAP directory. When

208 Appendix A Importing and Exporting Account Information 4 To export all accounts listed, select all of them. To export a specific account, selec

Appendix A Importing and Exporting Account Information 209 Using XML Files Created With AppleShare IP 6.3You can use the Web & File Admin appli

Chapter 1 User Management Overview 21 For details on settings for Mac OS X mail service, see the mail service administration guide.Resource UsageDi

210 Appendix A Importing and Exporting Account Information The first record in the file must characterize the format of each account in the file. T

Appendix A Importing and Exporting Account Information 211 Here is an example of a record description:0x0A 0x5C 0x3A 0x2C dsRecTypeStandard:Users 7

212 Appendix A Importing and Exporting Account Information This is an example of a formatted record with the following attributes and values:<At

213AppendixBB ACL Permissions and Group Memberships Using GUIDMac OS X Server version 10.4 introduces a new user and group attribute for determi

214 Appendix B ACL Permissions and Group Memberships Using GUID Now, two users can have identical long name, short name, UID, and GID, but will hav

Appendix B ACL Permissions and Group Memberships Using GUID 215 SIDs and Windows InteroperabilitySecurity identifiers (SIDs) for Windows systems ha

216 Appendix B ACL Permissions and Group Memberships Using GUID

217GlossaryGlossaryThis glossary defines terms and spells out abbreviations you may encounter while working with online help or the various refe

218 Glossary computer list A list of computers that have the same preference settings and are available to the same users and groups.DHCP Dynami

Glossary 219 export In the Network File System (NFS), a way of sharing a directory with clients on a network. TBD for RAID context.filter A “scr

22 Chapter 1 User Management Overview NetBootWith NetBoot, Mac OS 9 and Mac OS X computers can start up from a network-based system disk image, pro

220 Glossary ICMP Internet Control Message Protocol. A message control and error-reporting protocol used between host servers and gateways. For e

Glossary 221 local domain A directory domain that can be accessed only by the computer on which it resides.local home directory A home directory

222 Glossary MTA Mail Transfer Agent. A mail service that sends outgoing mail, receives incoming mail for local recipients, and forwards incoming

Glossary 223 open relay A server that receives and automatically forwards mail to another server. Junk mail senders exploit open relay servers to

224 Glossary QTSS QuickTime Streaming Server. A technology that lets you deliver media over the Internet in real time.realm Definition TBD; gene

Glossary 225 short name An abbreviated name for a user. The short name is used by Mac OS X for home directories, authentication, and email addres

226 Glossary Tomcat The official reference implementation for Java Servlet 2.2 and JavaServer Pages 1.1, two complementary technologies developed

Glossary 227 WebDAV realm A region of a website, usually a folder or directory, that’s defined to provide access for WebDAV users and groups.wild

228 Glossary

229IndexIndexAaccessto applications 141, 142to computers 108to disk and server icons 156to folders 159to group folders (adding a Dock item) 149to

Chapter 1 User Management Overview 23 Network InstallNetwork Install is a centralized network software installation service. It lets you selectivel

230 Index exporting NFS share point 120exporting users and groups 43extensionsdisabling (Classic) 146FFast User Switching 168filename extension

Index 231solving problems 198Ppasswords 72hints 168unable to modify 198permissions 25–30, 48, 62, 70–78, 90, 95, 114, 171phone numbersadding

232 Index wireless servicemanaging clients using 55Workgroup Managerexporting users and groups in 207importing users and groups in 206overview

24 Chapter 1 User Management Overview Server AdministrationServer administration privileges determine the powers a user has when logged in to a par

Chapter 1 User Management Overview 25 Users and Managed UsersDepending on how you set up your server and your user accounts, users can log in using

26 Chapter 1 User Management Overview Group FoldersWhen you define a group, you can also specify a folder for storing files you want group members

Chapter 1 User Management Overview 27 The User ExperienceOnce you have created an account for a user, the user can access server resources accordin

28 Chapter 1 User Management Overview The following picture shows a user logging in to a Mac OS X computer that can locate the user’s account in a

Chapter 1 User Management Overview 29 Identity ValidationWhen authenticating a user, Mac OS X first locates the user’s account and then uses the pa

3 1 Contents Preface 13 About This Guide13 What’s New in Version 10.4 14 What’s in This Guide 15 Using Onscreen Help 15 The Mac OS X Server Su

30 Chapter 1 User Management Overview Directory and File Owner AccessWhen a directory or file is created, the file system stores the user ID of the

2 312 Getting Started With User ManagementThis chapter provides information for setting up a user management environment.The chapter contains pla

32 Chapter 2 Getting Started With User Management Step 1: Before you begin, do some planningAnalyze your users’ needs to determine which directory

Chapter 2 Getting Started With User Management 33 Mac OS X Server makes important resources visible throughout the network. Key network-visible res

34 Chapter 2 Getting Started With User Management 5 If you want the domain administrator to have other responsibilities, such as setting up file se

Chapter 2 Getting Started With User Management 35 You can also create accounts on Mac OS X Server to manage Windows users and provide Windows domai

36 Chapter 2 Getting Started With User Management • For information about working with read-only group accounts, see “Working With Read-Only Group

Chapter 2 Getting Started With User Management 37 Planning Strategies for User ManagementHere are some planning activities to undertake before you

38 Chapter 2 Getting Started With User Management Determining Server and Storage RequirementsThese requirements vary with the number of users and c

Chapter 2 Getting Started With User Management 39 Using Mobile AccountsMobile accounts are network accounts which have been set up to be accessible

4 Contents 39 Using Mobile Accounts 39 Portable Home Directories 39 Devising a Home Directory Strategy 40 Identifying Groups 40 Determining Administr

40 Chapter 2 Getting Started With User Management Pick a strategy before creating users. You can move home directories, but if you do, you may need

Chapter 2 Getting Started With User Management 41 Using Workgroup ManagerOnce you have installed the Mac OS X Server software, you can access Workg

42 Chapter 2 Getting Started With User Management Major Workgroup Manager TasksAfter login, the user account window appears, showing a list of user

Chapter 2 Getting Started With User Management 43 • To import or export user and group accounts, choose Server > Import or Server > Export, r

44 Chapter 2 Getting Started With User Management Listing Accounts in the Local Directory DomainServices and programs running on a server can acces

Chapter 2 Getting Started With User Management 45 Note that “available” directory domains are not the same as directory domains in a search policy.

46 Chapter 2 Getting Started With User Management 3 Choose Workgroup Manager > Preferences to make finding accounts more convenient when the dom

Chapter 2 Getting Started With User Management 47 Shortcuts for Working With AccountsThere are a several techniques that let you manage accounts mo

48 Chapter 2 Getting Started With User Management Backing Up and Restoring User Management DataBacking Up and Restoring FilesSee onscreen help for

3 493 User Management for Mobile ClientsThis chapter provides suggestions for managing portable computers used by an individual user or multiple

Contents 5 56 Security Considerations When Using Portable Home Directories 56 Loss and Data Recovery Considerations Chapter 4 57 Setting Up User Acco

50 Chapter 3 User Management for Mobile Clients Using Mobile AccountsA mobile account on a Mac OS X Server is a user account whose account is synch

Chapter 3 User Management for Mobile Clients 51 Creating a Mobile AccountOnce a mobile account is created, it appears in the account list in the Ac

52 Chapter 3 User Management for Mobile Clients The User Experience for Mobile AccountsIf the computer is configured to display a list of users at

Chapter 3 User Management for Mobile Clients 53 Considerations for Assigning Content to Be SynchronizedServer administrators should explore the tra

54 Chapter 3 User Management for Mobile Clients Mac OS X Portable Computers With Multiple Local UsersOne example of shared portable computers is an

Chapter 3 User Management for Mobile Clients 55 If the user also has a Mac OS X Server user account and network access is available, they may still

56 Chapter 3 User Management for Mobile Clients FileVault for Mobile ClientsMac OS X offers the ability to turn on FileVault for mobile accounts. F

4 574 Setting Up User AccountsThis chapter tells you how to set up, edit, and manage user accounts.About User AccountsA user account stores data

58 Chapter 4 Setting Up User Accounts Predefined User AccountsThe following table describes some of the user accounts that are created automaticall

Chapter 4 Setting Up User Accounts 59 Administering User AccountsThis section describes how to administer user accounts stored in various kinds of

6 Contents 78 Adding a User to Groups 78 Removing a User From a Group 79 Reviewing a User’s Group Memberships 79 Working With Home Settings for Users

60 Chapter 4 Setting Up User Accounts Creating Read-Write LDAPv3 User AccountsYou can create a user account on a non-Apple LDAPv3 server if it has

Chapter 4 Setting Up User Accounts 61 Editing Multiple Users SimultaneouslyYou can use Workgroup Manager to make the same change to multiple user a

62 Chapter 4 Setting Up User Accounts Working With Read-Only User AccountsYou can use Workgroup Manager to review information for user accounts sto

Chapter 4 Setting Up User Accounts 63 Deleting a User AccountYou can use Workgroup Manager to delete a user account stored in the LDAP directory of

64 Chapter 4 Setting Up User Accounts 4 Fill in the fields with values you want new user accounts to inherit. Delete any values you don’t want to p

Chapter 4 Setting Up User Accounts 65 Renaming PresetsName your presets to help remind you of the template settings or identify the type of user ac

66 Chapter 4 Setting Up User Accounts Defining Long User NamesThe user name is the long name for a user, such as Ellen Brown or Dr. Arnold T. Smith

Chapter 4 Setting Up User Accounts 67 • When Mac OS X checks to see whether a user belongs to a group authorized to access a particular file, it us

68 Chapter 4 Setting Up User Accounts Choosing Stable Short NamesWhen you create groups, Mac OS X identifies users in them by their first short nam

Chapter 4 Setting Up User Accounts 69 Now let’s say that Tony and Tom have the same short name, but different passwords. If Tom attempts to log in

Contents 7102 Special Purpose Computer Lists102 Creating a Computer List103 Creating a Preset for Computer Lists104 Using a Computer List Preset104 Ad

70 Chapter 4 Setting Up User Accounts Avoiding Duplicate Short NamesSince short names are used to find user IDs of group members, duplicate short n

Chapter 4 Setting Up User Accounts 71 Defining User IDsA user ID is a number that uniquely identifies a user. Mac OS X computers use the user ID to

72 Chapter 4 Setting Up User Accounts Setting Password Options for Imported UsersWhen you export users using Workgroup Manager, password informatio

Chapter 4 Setting Up User Accounts 73 Assigning Administrator Rights for a Directory DomainA user who has administrator privileges for an Apple dir

74 Chapter 4 Setting Up User Accounts Working With Advanced Settings for UsersAdvanced settings include login settings, keywords, password validati

Chapter 4 Setting Up User Accounts 75 6 Choose a shell from the Login Shell pop-up menu to specify the default shell for the user when logging in t

76 Chapter 4 Setting Up User Accounts Applying Keywords to User AccountsYou can’t add keywords to more than one user at a time; however, you can re

Chapter 4 Setting Up User Accounts 77 Working With Group Settings for UsersGroup settings identify the groups a user is a member of.In Workgroup Ma

78 Chapter 4 Setting Up User Accounts Adding a User to GroupsAdd a user to a group when you want multiple users to have the same file permissions o

Chapter 4 Setting Up User Accounts 79 3 To be authenticated, click the lock.4 Click the Groups button. 5 Select the group or groups from which you

8 Contents13 4 Day-to-Day Client AdministrationChapter 9 135 Managing Preferences135 How Workgroup Manager Works With Mac OS X Preferences13 6 Managin

80 Chapter 4 Setting Up User Accounts Disabling a User’s Mail Service You can use Workgroup Manager to disable mail service for users whose account

Chapter 4 Setting Up User Accounts 81 8 Select a Mail Access setting to identify the protocol used for the user’s mail account: Post Office Protoc

82 Chapter 4 Setting Up User Accounts Disabling a User’s Access to Print Queues Enforcing QuotasYou can use Workgroup Manager to prevent a user fro

Chapter 4 Setting Up User Accounts 83 Deleting a User’s Print Quota for a Specific QueueIf you no longer require a print quota for a particular que

84 Chapter 4 Setting Up User Accounts Working With Info Settings for UsersIf a user's account resides in an LDAPv3 directory domain, it can co

5 855 Setting Up Group AccountsA group account offers a simple way to manage a collection of users with similar needs. This chapter tells you how

86 Chapter 5 Setting Up Group Accounts Predefined group nameGroup ID Useadmin 80 The group to which users with administrator privileges belong.bin

Chapter 5 Setting Up Group Accounts 87 Creating Mac OS X Server Group AccountsYou need administrator privileges for a directory domain to create a

88 Chapter 5 Setting Up Group Accounts You can also use a preset or an import file to create a new group. For details, see “Creating a Preset for G

Chapter 5 Setting Up Group Accounts 89 6 Edit settings for the group in the tabs provided. See “Working With Member Settings for Groups” on page 90

Contents 9158 Preventing Users From Ejecting Disks159 Hiding the Burn Disc Command in the Finder159 Controlling User Access to Folders160 Removing Res

90 Chapter 5 Setting Up Group Accounts 3 Click the small globe above the accounts list and open the domain in which the group account resides.4 To

Chapter 5 Setting Up Group Accounts 91 When you create a user account and assign the new user a primary group, the user is automatically added to t

92 Chapter 5 Setting Up Group Accounts Naming a GroupA group has two names: a long name and a short name. • The long group name (for example, Engl

Chapter 5 Setting Up Group Accounts 93 To work with a group ID using Workgroup Manager:1 In Workgroup Manager, click Accounts.2 Select the group ac

94 Chapter 5 Setting Up Group Accounts 2 Select the group account you want to work with. To select an account, click the small globe above the acco

Chapter 5 Setting Up Group Accounts 95 6 In the Owner Name field, enter the name of the user you want to own the group folder so the user can act a

96 Chapter 5 Setting Up Group Accounts 7 Click Accounts and select the group account you want to work with. To select a group account, connect to t

Chapter 5 Setting Up Group Accounts 97 The procedure detailed here assumes the share point exists. If the share point does not yet exist, follow th

98 Chapter 5 Setting Up Group Accounts 10 To create the folder, use the CreateGroupFolder command in Terminal.You must be the root user to use the

Chapter 5 Setting Up Group Accounts 99 Deleting a Group AccountYou can use Workgroup Manager to delete a group account stored in the LDAP directory