Apple 10.5 Leapard manual Getting Started with User Management

For example, you might want to give student lab assistants the ability to manage user passwords for a small group of students, while giving teachers the ability to manage user passwords, edit user information, and edit group information for all of their classes.

Because users can be given limited administrator privileges, consider which users require domain administrator privileges. A well-planned hierarchy of administrators and users with special administrator privileges helps you distribute system administration tasks and makes workflow and network management more efficient.

When you use Server Assistant to configure your server, specify a password for the owner/administrator. This password also becomes the root password for your server. Only a few server administrators need to know the root password, but sometimes it’s necessary when using command-line tools (such as CreateGroupFolder).

Administrators who don’t need root access can use Workgroup Manager to create an administrator user with a password different from the root password.

Use the root password with caution and store it in a secure location. The root user has full access to the system, including system files. If necessary, you can use Workgroup Manager to change the root password.

Chapter 2 Getting Started with User Management

39