Apple 10.5 Leapard manual Choosing a Workgroup

Environment	Desired effect
Corporate workstation	Users must enter their
	name and password to log
	in.
	Users should be able to
	work without being
	logged out.
	Except for primary users,
	no one can log in unless
	they have a network or
	local account.

Key login settings

ÂMessage:“If you have issues, contact the IT help desk at ...”

ÂShow name and password text fields

ÂShow Restart and Shut Down buttons

ÂDon’t show password hint

ÂDon’t enable automatic login

ÂDon’t log out inactive users

ÂDon’t enable external accounts

ÂDon’t enable guest account

High security	The computer should be	Â	Message:“Unauthorized use prohibited”
	as secure as possible,	Â	Show name and password text fields
	restricting who can use	Â	Don’t show Restart or Shut Down buttons
	the computer and how	Â	Don’t show password hint
	they log in.	Â	Don’t enable automatic login
		Â	Don’t enable >console login
		Â	Don’t enable fast user switching
		Â	Log out inactive users
		Â	Don’t enable external accounts
		Â	Don’t enable guest account

Choosing a Workgroup

In addition to customizing the login window, you can manage login preferences that affect whether users choose workgroups.

If you don’t manage login access preferences, after the user authenticates, a list of available workgroups appears (depending on computer settings and if the user belongs to more than one workgroup).

Network account users choose from workgroups in their directory domain but local users access their workgroups from their local directory domain.

It’s possible for a user to belong to a group that doesn’t appear in the list. The login screen lists only workgroups that are allowed access by the computer group.

Local administrators also have the option not to choose a workgroup and disable preference management.

Users can select “Remember my choice,” which bypasses the workgroup chooser in future logins and selects a workgroup for the user. Users can still change their workgroup by holding down the Option key while their password is validated.

If the computer or the computer group it’s associated with supports local-only users, all workgroups that are given access to the computer by the computer group are listed after a local user logs in. The user can select from any of these.

Chapter 9 Client Management Overview

151