Manuals / Apple / Baby / Model Vehicle

Apple 10.5 Leapard manual 273

Models: 10.5 Leapard

1 275

Download 275 pages 23.09 Kb

Page 273

ports, proxy server 213, 214

POSIX (Portable Operating System Interface) 28, 29 power settings. See Energy Saver

predefined accounts 56, 90, 251 preferences

account 139 appearance 227

assistive devices 227, 228, 229, 231 browser 237

CDs 200

computer accounts 157, 162 computer groups 157, 158, 163 directory services 160

DVDs 200

group 157, 159, 162, 175 inherited 158 keyboard 229

mail 80

manifests 232, 236 mixed-state 51 mouse 230 overview 149, 152 server 21 streaming media 149 user 149, 157, 161, 174 web 237

Workgroup Manager 45, 155, 160 workgroups 151, 158, 194

See also managed preferences presets

computer groups 50, 109, 110 group accounts 50, 92

user accounts 50, 61, 62 primary domain controller. See PDC primary group, user's 28, 77, 89 print service

access control 81, 82, 83, 84, 220, 221, 222, 223 default printer setting 222, 223

footers on printouts 223 overview 150, 220 printer problems 248

privileges, administrator 23, 38, 68, 70, 243 See also permissions

problems. See troubleshooting profanity, hiding 217 protocols

AFP 114, 117, 123

DHCP 195, 240, 241 FTP 215

SMB 29, 114, 119, 127 See also LDAP

proxy server settings 213, 214

Q

quotas, disk space 36, 80, 128, 129, 130, 205

Index

R

read-only accounts 59, 94 real name. See long name remote servers 185, 239, 241

removable media, accessing 186, 200, 202 restart, controlling 172, 187

roaming user profiles 85, 114, 128, 130 root permissions 39

S

Safari 237

screen display settings 227 searching users and groups 45, 49, 75 search policies 26, 47, 98

security ACLs 27, 29

directory domains 32, 43 home folders 38, 144, 205 mobile clients 131, 144, 205 SID 29

See also access; authentication; passwords; permissions

security identifier. See SID Seeing settings 227 Server Admin 20 server administrator 23 Server Assistant 39

Server Message Block. See SMB Server Preferences 21 servers

accessing 183, 185 connections 185 group requirements 36 home folders 36, 115 proxy 213, 214 remote 185, 239, 241 requirements 35

setup procedures. See configuration shadow passwords 74

shared directory domain 31, 245 See also LDAP

shared files. See file sharing share points

automountable 117, 118, 123, 125 group folders 101, 199

guest access 117

home folders 32, 79, 115, 116, 117, 118, 120, 123, 125

local users 122 mounting 117, 118 setup 116 Windows users 120

sharing tool 118 shortcuts, command 230 short name 64, 65, 66, 96, 254

273

Image 273

Apple 10.5 Leapard manual 273

Contents

Mac OS X Server 019-0938/2007-09-01 Contents Setting Up an Administrator Computer Configuring the Administrator’s Computer and AccountCreating a Domain Administrator Account Using Workgroup ManagerContents Where Group Accounts Are Stored Setting Up Group AccountsAdministering Group Accounts Creating a Preset for Group Accounts118 Chapter Contents Contents If You Can‘t Change a User’s Password Type to Open Directory 267 257What’s New in Workgroup Manager About This GuideWhat’s in This Guide Using Onscreen Help To get help for an advanced configuration of Leopard ServerTo see the most recent server help topics This guide Tells you how to Mac OS X Server Administration GuidesUser Management Getting Additional Information Getting Documentation UpdatesWorkgroup Manager Tools for User ManagementSee this document Server AdminNetBoot NetInstallServer Preferences Accounts Command-Line ToolsServer Administration Administrator AccountsGuest Account User AccountsComputer Accounts Group AccountsAuthentication and Identity Validation User ExperienceComputer Groups Information Access Control Folder and File Owner Access ACLs and Posix Permissions User Management Overview Getting Started with User Management Setup OverviewSet up an administrator computer Create user accounts and home folders Analyzing Your Environment Planning Strategies for User ManagementDetermining Server and Storage Requirements Identifying Directory Services RequirementsUsers with local accounts typically have local home folders Choosing a Home Folder StructureDevising a Home Folder Distribution Strategy Identifying Groups Determining Administrator RequirementsGetting Started with User Management Getting Started with User Management Configuring the Administrator’s Computer and Account Setting Up an Administrator ComputerTo set up an administrator computer Using Workgroup Manager Creating a Domain Administrator AccountTo create a domain administrator account To connect and authenticate to directory domains Major Workgroup Manager Tasks Modifying Workgroup Manager Preferences To set Workgroup Manager preferencesPreference Description Finding and Listing Accounts Working with Account Lists in Workgroup ManagerListing Accounts in the Local Directory Domain To list accounts in a server’s local directory domain Listing Accounts in Search Policy Directory DomainsListing Accounts in Available Directory Domains Refreshing Account ListsFinding Specific Accounts in a List Using Advanced Search To filter items in the list of accountsTo do this Do this Using Presets Shortcuts for Working with AccountsSorting Users and Groups Interface element Mixed-state appearance Editing Multiple Accounts SimultaneouslyTo batch-edit accounts that match specific criteria Importing and Exporting Account Information Getting Started with Workgroup Manager About User Accounts Where User Accounts Are StoredUser ID Predefined User AccountsAdministering User Accounts Creating User AccountsTo create a user account To make changes to a user account Editing User Account InformationWorking with Read-Only User Accounts Working with Guest UsersTo work with a read-only user account Working with Windows User Accounts To delete a user account using Workgroup ManagerDeleting a User Account Disabling a User AccountWorking with Presets Creating a Preset for User AccountsTo create a preset for user accounts Renaming Presets Using Presets to Create AccountsEditing Presets To create an account using a presetDeleting a Preset Working with Basic SettingsTo edit a preset To delete a presetModifying Short Names To work with the user name using Workgroup ManagerChoosing Stable Short Names To work with a user short name using Workgroup ManagerAvoiding Duplicate Names To change a user ID in Workgroup Manager Modifying User IDsAssigning Administrator Privileges for a Server Assigning a Password to a UserTo assign a password To set server administrator privileges in Workgroup ManagerTo change a user’s login picture Choosing a User’s Login PictureGiving a User Limited Administrative Capabilities Removing Administrative Privileges from a UserTo remove a user’s administrative privileges Working with PrivilegesTask Description To add limited administrative capabilitiesGiving a User Full Administrative Capabilities Working with Advanced SettingsTo change a user’s administrative privileges To enable a user’s calendarTo choose a default shell Choosing a Default ShellTo choose a user password type and set password options Choosing a Password Type and Setting Password OptionsCreating a Master List of Keywords Applying Keywords to User AccountsTo edit the master keyword list To work with a comment using Workgroup Manager Editing CommentsTo work with keywords for a user account Working with Group Settings To set a primary group ID using Workgroup ManagerChoosing a User’s Primary Group To review group memberships using Workgroup Manager Reviewing a User’s Group MembershipsAdding a User to a Group To add a user to a group using Workgroup Manager Working with Home SettingsTo remove a user from a group using Workgroup Manager Removing a User from a GroupEnabling Mail Service Account Options Working with Mail SettingsDisabling a User’s Mail Service Working with Print Quota SettingsTo disable a user’s mail service using Workgroup Manager To forward a user’s mail using Workgroup ManagerEnabling a User’s Access to Specific Print Queues Enabling a User’s Access to All Available Print QueuesTo delete a user’s print quota using Workgroup Manager Resetting a User’s Print QuotaTo restart a user’s print quota using Workgroup Manager Removing a Print Quota For a QueueTo disable a user’s access to print queues enforcing quotas Working with Info SettingsWorking with Windows Settings Changing a Windows User’s Profile LocationTo change a user’s info Changing a Windows User’s Login Script Location Changing a Windows User’s Home Folder Drive Letter Working with GUIDsChanging a Windows User’s Home Folder Location Viewing GUIDsTo view a user or group Guid How Group Accounts Track Membership About Group AccountsWhere Group Accounts Are Stored Predefined Group AccountsPredefined Group name Group ID Use Administering Group Accounts Creating Group AccountsTo create a group account To create a preset for group accounts Creating a Preset for Group AccountsEditing Group Account Information To make changes to a group accountTo create a hierarchical group Creating Hierarchical GroupsTo convert a legacy group to an upgraded group account Upgrading Legacy GroupsWorking with Read-Only Groups To delete a group using Workgroup Manager Working with Basic Settings for GroupsDeleting a Group Naming a GroupDefining a Group ID To work with group names using Workgroup ManagerChoosing a Group’s Login Picture To work with a group ID using Workgroup ManagerTo choose a group’s login picture To enable a group’s web services Enabling a Group’s Web ServicesAdding Users or Groups to a Group Working with Member Settings for GroupsWorking with Group Folder Settings Removing Group MembersTo remove group members Specifying No Group Folder Creating a Group FolderTo specify no group folder 102 Designating a Group Folder for Use by Multiple Groups 104 About Computer Accounts Setting Up Computers Computer GroupsTo create a computer account Creating Computer AccountsTo set up the guest computer account Working with Guest ComputersWorking with Windows Computers About Computer Groups Administering Computer GroupsDifferences Between Computer Groups and Computer Lists Creating a Computer GroupTo set up a computer group Creating a Preset for Computer GroupsUsing a Computer Group Preset To set up a preset for computer groupsTo use a preset for computer groups To add computers or computer groups to a computer group Adding Computers or Computer Groups to a Computer GroupDeleting a Computer Group To upgrade computer lists to computer groupsUpgrading Computer Lists to Computer Groups To delete a computer groupAbout Home Folders Setting Up Home FoldersHosting Home Folders for Other Clients Hosting Home Folders for Mac OS X ClientsDistributing Home Folders Across Multiple Servers Setting Up a Share Point Administering Share PointsTo set up a share point Unix Class Name PermissionTo set up an automountable AFP share point for home folders Setting Up an Automountable AFP Share Point for Home FoldersTo set up an automountable NFS share point for home folders Setting Up an Automountable NFS Share Point for Home FoldersSetting Up an SMB Share Point To create an SMB share point and set permissions Administering Home Folders Specifying No Home FolderTo define no home folder To create a home folder for a local user Creating a Home Folder for a Local UserTo create a network home folder for AFP or NFS share points Creating a Network Home FolderCreating a Custom Location for Home Folders To create a custom home folder using Workgroup Manager Element Do this To set up a home folder in an existing share point Setting Up a Home Folder for a Windows User\\servername\usershortname Setting Disk Quotas Using Presets to Choose Default Home Folders Setting Disk Quotas for Windows Users to Avoid Data LossMoving Home Folders Deleting Home FoldersAbout Mobile Accounts Managing Portable ComputersAbout Portable Home Directories Logging In to Mobile Accounts Resolving Sync Conflicts About External AccountsLogging In to External Accounts Advantages of Using Mobile Accounts Considerations and Strategies for Deploying Mobile AccountsApplications locally cache temporary files You can manage individual mobile accounts Considerations for Using Mobile Accounts138 Mobile accounts can’t restore deleted files through syncing Strategies for Syncing ContentSetting Up Mobile Accounts for Use on Portable Computers Configuring Portable ComputersTo set up portable computers for use on your network Unknown Mac OS X Portable Computers Managing Mobile Clients Without Using Mobile AccountsUsing Mac OS X Portable Computers with Multiple Users 143 Optimizing the File Server for Mobile Accounts Securing Mobile ClientsTo optimize the file server for mobile accounts 146 Client Management Overview There are several key network-visible resources Using Network-Visible ResourcesLimits access Power of PreferencesCustomizing the User Experience Environment Control By letting you manageDesigning the Login Experience Key login settingsEnvironment Desired effect Choosing a Workgroup Improving Workflow Working with Synced Homes153 154 Preference pane What you can manage Using Workgroup Manager to Manage PreferencesUnderstanding Managed Preference Interactions 157 158 Understanding Hierarchical Preference Management Setting the Permanence of ManagementCaching Preferences Preference Management BasicsTo manage user preferences Managing User PreferencesManaging Computer Preferences Managing Group PreferencesTo manage group preferences To manage computer preferencesManaging Computer Group Preferences Disabling Management for Specific PreferencesTo manage computer group preferences To selectively disable preference management Managing Access to ApplicationsIcon Indicates the application has this type of signature What you can controlTo allow users to open specific applications and folders To allow specific Dashboard widgets Allowing Specific Dashboard WidgetsDisabling Front Row To disable Front RowManaging Classic Preferences To set up a list of accessible applicationsSelecting Classic Startup Options To work with various startup options for ClassicClassic preference pane What you can control Choosing a Classic System Folder Allowing Special Actions During RestartTo choose a specific Classic System Folder Controlling Access to Classic Apple Menu Items To allow special actions during restartTo hide or show items in the Apple menu To adjust Classic sleep settings Adjusting Classic Sleep SettingsManaging Dock Preferences To choose where Classic user preferences are storedMaintaining Consistent User Preferences for Classic Controlling the User’s DockTo add a Dock item for a group folder Providing Easy Access to Group FoldersTo add items to a user’s Dock Adding Items to a User’s DockManaging Energy Saver Preferences Preventing Users from Adding or Deleting Dock ItemsTo prevent users from adding items to their Docks To set sleep and wake settings Using Sleep and Wake Settings for Desktop ComputersTo manage portable computer settings Setting Energy Saver Settings for Portable ComputersDisplaying Battery Status to Users To show battery status in the menu bar Scheduling Automatic Startup, Shutdown, or SleepTo schedule automatic actions Setting Up Simple Finder Managing Finder PreferencesFinder preference pane What you can control To turn on Simple Finder Controlling the Behavior of Finder WindowsTo hide disk and server icons on the desktop To set Finder window preferencesMaking Filename Extensions Visible Hiding the Alert Message When a User Empties the TrashTo hide the Trash warning message To make filename extensions visibleControlling User Access to Remote Servers Controlling User Access to an iDiskPreventing Users from Ejecting Discs Controlling User Access to Folders Hiding the Burn Disc Command in the FinderTo hide the Burn Disc command To hide the Go to Folder commandTo hide the Restart and Shut Down commands Adjusting the Appearance and Arrangement of Desktop ItemsRemoving Restart and Shut Down from the Apple Menu To set preferences for the desktop viewAdjusting the Appearance of Finder Window Contents Changing the Appearance of the Login Window Managing Login PreferencesLogin preference pane What you can control List setting Mac OS X version EffectTo change the appearance of the Login Window Option What this does when enabled Configuring Miscellaneous Login OptionsChoosing Who Can Log To configure miscellaneous login optionsTo choose who can log Customizing the Workgroups Displayed at LoginTo customize the workgroups displayed at login Enabling the Use of Login and Logout ScriptsTrust value name Requirements To enable the use of login or logout scriptsClick Edit Choosing a Login or Logout ScriptTo choose login or logout scripts Automatically Opening Items After a User LogsTo set an item to open automatically Providing Access to a User’s Network Home Folder Providing Easy Access to the Group Share Point To add a login item for the group share pointTo automatically mount the Network Home Managing Media Access Preferences Controlling Access to CDs, DVDs, and Recordable DiscsTo control access to disc media Ejecting Removable Media Automatically When a User Logs Out Controlling Access to Hard Drives, Disks, and Disk ImagesTo restrict access to internal and external disks To automatically eject removable mediaManaging Mobility Preferences Creating a Mobile AccountMobility preference pane What you can control Preventing the Creation of a Mobile Account To create a mobile account using Workgroup ManagerManually Removing Mobile Accounts from Computers To prevent the creation of mobile accountsTo remove a mobile account OptionEffect Enabling FileVault for Mobile AccountsTo enable FileVault for mobile accounts To select the location of a mobile account Selecting the Location of a Mobile AccountHome folder location Description Type Name PrivilegeTo create an external account Creating External AccountsSetting Expiration Periods for Mobile Accounts To set an expiration period To stop files from syncing Stopping Files from Syncing for a Mobile AccountSetting the Background Sync Frequency Showing Mobile Account Status in the User’s Menu BarTo set the frequency for syncing background folders Managing Network Preferences Configuring Proxy Servers by PortTo show mobile account status in the user’s menu bar Network preference pane What you can controlTo configure proxy servers for a user or a group To choose the domains that users can access directlyAllowing Users to Bypass Proxy Servers for Specific Domains To enable passive FTP mode Enabling Passive FTP ModeTo disable Internet Sharing Disabling Internet SharingTo disable AirPort Disabling BluetoothTo disable Bluetooth Disabling AirPortTo prevent access to specific websites Preventing Access to Adult WebsitesManaging Parental Controls Preferences Hiding Profanity in DictionaryTo allow access only to specific websites Allowing Access Only to Specific WebsitesSetting Time Limits and Curfews on Computer Usage Managing Printing Preferences To set time limits and curfewsPrinting preference pane What you can control Making Printers Available to Users To restrict access to the printer listPreventing Users from Modifying the Printer List To create a printer list for usersRestricting Access to Printers Connected to a Computer Setting a Default PrinterTo set the default printer To restrict access to a specific printer Restricting Access to PrintersAdding a Page Footer to All Printouts To add a footer to all printoutsManaging Software Update Preferences Managing Access to System PreferencesTo manage access to Software Update servers Managing Time Machine Preferences To manage access to System PreferencesTo manage Time Machine preferences Managing Universal Access Preferences Adjusting the User’s Display SettingsUniversal Access Preference pane What you can control Adjusting Keyboard Accessibility Options Setting a Visual AlertTo adjust screen appearance To set a flashing alertOption Effect To set the way the keyboard responds to keystrokesAdjusting Mouse and Pointer Responsiveness Enabling Universal Access ShortcutsTo control mouse and pointer settings To allow Universal Access Shortcuts Using the Preference Editor with Preference ManifestsAllowing Devices for Users with Special Needs To allow assistive devicesAdding to the Preference Editor’s List Frequency Description To add to the preference editor’s listTo edit application preferences Editing Application Preferences with the Preference EditorTo disable management of an application’s preferences Manifest Examples of things you can change Using the Preference Editor to Manage Core ServicesTo add Safari to the preference editor list Using the Preference Editor to Manage Safari238 Testing Your Network’s Time and Time Zones Diagnosing Common Network IssuesTo test your network’s DNS service on a single computer Testing Your DNS ServiceTo test your network’s Dhcp service on a single computer Testing Your Dhcp ServiceIf You Can’t Edit an Account Using Workgroup Manager Solving Account ProblemsIf Users Can’t See Their Names in the Login Window If You Want to Use Earlier Versions of Workgroup ManagerIf You Can’t Modify a User’s Open Directory Password If You Can’t Assign Server Administrator PrivilegesIf Users Can’t Log In or Authenticate If Users Relying on a Password Server Can’t Log If Users Can’t Access Their Home Folders Problems with a Primary or Backup Domain ControllerIf Users Can’t Change Their Passwords If a Windows User Can’t Log in to the Windows DomainIf a Windows User Has No Home Folder If a Windows User’s Profile Settings Revert to DefaultsTesting Your Managed Client Settings Solving Preference Management ProblemsIf Users Don’t See a List of Workgroups at Login To view managed client settings in System ProfilerIf Users Can’t Add Printers to a Printer List If Login Items Added by a User Don’t OpenIf Items Placed in the Dock by a User Are Missing If a User’s Dock Has Duplicate ItemsIf Users See a Question Mark in the Dock If You Can’t Manage Network Views If Users See a Message About an Unexpected ErrorUnderstanding What You Can Import and Export Importing and Exporting Account InformationLimitations for Importing and Exporting Passwords Using Workgroup Manager to Import Accounts To import accounts using Workgroup ManagerArchiving the Open Directory Master Using Workgroup Manager to Export Accounts To export accounts using Workgroup Manager Using XML Files Created with AppleShare IP Apple Filing Protocol See AFP Access control list See ACLDirectory node See directory domain See also computer listFull name See long name Globally unique identifier See Guid Home directory See home folder Local home directory See local home folder 262 Primary domain controller See PDC Security identifier See SID Search path See search policyWeblog See blog 266 Index 268 269 270 271 272 273 274 275