Manuals / Apple / Baby / Model Vehicle

Apple 10.5 Leapard manual Getting Started with Workgroup Manager

Models: 10.5 Leapard

1 275

Download 275 pages 23.09 Kb

Page 54

54

Chapter 3 Getting Started with Workgroup Manager

Image 54

Apple 10.5 Leapard manual Getting Started with Workgroup Manager

Contents

Mac OS X Server 019-0938/2007-09-01 Contents Creating a Domain Administrator Account Configuring the Administrator’s Computer and AccountSetting Up an Administrator Computer Using Workgroup ManagerContents Administering Group Accounts Setting Up Group AccountsWhere Group Accounts Are Stored Creating a Preset for Group Accounts118 Chapter Contents Contents If You Can‘t Change a User’s Password Type to Open Directory 257 267About This Guide What’s New in Workgroup ManagerWhat’s in This Guide Using Onscreen Help To get help for an advanced configuration of Leopard ServerTo see the most recent server help topics Mac OS X Server Administration Guides This guide Tells you how toUser Management Getting Documentation Updates Getting Additional InformationTools for User Management Workgroup ManagerServer Admin See this documentNetBoot NetInstallServer Preferences Command-Line Tools AccountsAdministrator Accounts Server AdministrationUser Accounts Guest AccountGroup Accounts Computer AccountsAuthentication and Identity Validation User ExperienceComputer Groups Information Access Control Folder and File Owner Access ACLs and Posix Permissions User Management Overview Setup Overview Getting Started with User ManagementSet up an administrator computer Create user accounts and home folders Planning Strategies for User Management Analyzing Your EnvironmentIdentifying Directory Services Requirements Determining Server and Storage RequirementsChoosing a Home Folder Structure Users with local accounts typically have local home foldersDevising a Home Folder Distribution Strategy Determining Administrator Requirements Identifying GroupsGetting Started with User Management Getting Started with User Management Configuring the Administrator’s Computer and Account Setting Up an Administrator ComputerTo set up an administrator computer Using Workgroup Manager Creating a Domain Administrator AccountTo create a domain administrator account To connect and authenticate to directory domains Major Workgroup Manager Tasks Modifying Workgroup Manager Preferences To set Workgroup Manager preferencesPreference Description Finding and Listing Accounts Working with Account Lists in Workgroup ManagerListing Accounts in the Local Directory Domain Listing Accounts in Search Policy Directory Domains To list accounts in a server’s local directory domainListing Accounts in Available Directory Domains Refreshing Account ListsFinding Specific Accounts in a List Using Advanced Search To filter items in the list of accountsTo do this Do this Using Presets Shortcuts for Working with AccountsSorting Users and Groups Editing Multiple Accounts Simultaneously Interface element Mixed-state appearanceTo batch-edit accounts that match specific criteria Importing and Exporting Account Information Getting Started with Workgroup Manager Where User Accounts Are Stored About User AccountsPredefined User Accounts User IDAdministering User Accounts Creating User AccountsTo create a user account Editing User Account Information To make changes to a user accountWorking with Read-Only User Accounts Working with Guest UsersTo work with a read-only user account Deleting a User Account To delete a user account using Workgroup ManagerWorking with Windows User Accounts Disabling a User AccountWorking with Presets Creating a Preset for User AccountsTo create a preset for user accounts Editing Presets Using Presets to Create AccountsRenaming Presets To create an account using a presetTo edit a preset Working with Basic SettingsDeleting a Preset To delete a presetTo work with the user name using Workgroup Manager Modifying Short NamesTo work with a user short name using Workgroup Manager Choosing Stable Short NamesAvoiding Duplicate Names Modifying User IDs To change a user ID in Workgroup ManagerTo assign a password Assigning a Password to a UserAssigning Administrator Privileges for a Server To set server administrator privileges in Workgroup ManagerChoosing a User’s Login Picture To change a user’s login pictureTo remove a user’s administrative privileges Removing Administrative Privileges from a UserGiving a User Limited Administrative Capabilities Working with PrivilegesTo add limited administrative capabilities Task DescriptionTo change a user’s administrative privileges Working with Advanced SettingsGiving a User Full Administrative Capabilities To enable a user’s calendarChoosing a Default Shell To choose a default shellChoosing a Password Type and Setting Password Options To choose a user password type and set password optionsCreating a Master List of Keywords Applying Keywords to User AccountsTo edit the master keyword list To work with a comment using Workgroup Manager Editing CommentsTo work with keywords for a user account Working with Group Settings To set a primary group ID using Workgroup ManagerChoosing a User’s Primary Group To review group memberships using Workgroup Manager Reviewing a User’s Group MembershipsAdding a User to a Group To remove a user from a group using Workgroup Manager Working with Home SettingsTo add a user to a group using Workgroup Manager Removing a User from a GroupWorking with Mail Settings Enabling Mail Service Account OptionsTo disable a user’s mail service using Workgroup Manager Working with Print Quota SettingsDisabling a User’s Mail Service To forward a user’s mail using Workgroup ManagerEnabling a User’s Access to All Available Print Queues Enabling a User’s Access to Specific Print QueuesTo restart a user’s print quota using Workgroup Manager Resetting a User’s Print QuotaTo delete a user’s print quota using Workgroup Manager Removing a Print Quota For a QueueWorking with Info Settings To disable a user’s access to print queues enforcing quotasWorking with Windows Settings Changing a Windows User’s Profile LocationTo change a user’s info Changing a Windows User’s Login Script Location Changing a Windows User’s Home Folder Location Working with GUIDsChanging a Windows User’s Home Folder Drive Letter Viewing GUIDsTo view a user or group Guid About Group Accounts How Group Accounts Track MembershipWhere Group Accounts Are Stored Predefined Group AccountsPredefined Group name Group ID Use Administering Group Accounts Creating Group AccountsTo create a group account Editing Group Account Information Creating a Preset for Group AccountsTo create a preset for group accounts To make changes to a group accountCreating Hierarchical Groups To create a hierarchical groupTo convert a legacy group to an upgraded group account Upgrading Legacy GroupsWorking with Read-Only Groups Deleting a Group Working with Basic Settings for GroupsTo delete a group using Workgroup Manager Naming a GroupTo work with group names using Workgroup Manager Defining a Group IDChoosing a Group’s Login Picture To work with a group ID using Workgroup ManagerTo choose a group’s login picture Enabling a Group’s Web Services To enable a group’s web servicesWorking with Member Settings for Groups Adding Users or Groups to a GroupWorking with Group Folder Settings Removing Group MembersTo remove group members Specifying No Group Folder Creating a Group FolderTo specify no group folder 102 Designating a Group Folder for Use by Multiple Groups 104 Setting Up Computers Computer Groups About Computer AccountsCreating Computer Accounts To create a computer accountTo set up the guest computer account Working with Guest ComputersWorking with Windows Computers Differences Between Computer Groups and Computer Lists Administering Computer GroupsAbout Computer Groups Creating a Computer GroupCreating a Preset for Computer Groups To set up a computer groupUsing a Computer Group Preset To set up a preset for computer groupsTo use a preset for computer groups Adding Computers or Computer Groups to a Computer Group To add computers or computer groups to a computer groupUpgrading Computer Lists to Computer Groups To upgrade computer lists to computer groupsDeleting a Computer Group To delete a computer groupSetting Up Home Folders About Home FoldersHosting Home Folders for Mac OS X Clients Hosting Home Folders for Other ClientsDistributing Home Folders Across Multiple Servers To set up a share point Administering Share PointsSetting Up a Share Point Unix Class Name PermissionSetting Up an Automountable AFP Share Point for Home Folders To set up an automountable AFP share point for home foldersSetting Up an Automountable NFS Share Point for Home Folders To set up an automountable NFS share point for home foldersSetting Up an SMB Share Point To create an SMB share point and set permissions Administering Home Folders Specifying No Home FolderTo define no home folder Creating a Home Folder for a Local User To create a home folder for a local userCreating a Network Home Folder To create a network home folder for AFP or NFS share pointsCreating a Custom Location for Home Folders To create a custom home folder using Workgroup Manager Element Do this Setting Up a Home Folder for a Windows User To set up a home folder in an existing share point\\servername\usershortname Setting Disk Quotas Moving Home Folders Setting Disk Quotas for Windows Users to Avoid Data LossUsing Presets to Choose Default Home Folders Deleting Home FoldersManaging Portable Computers About Mobile AccountsAbout Portable Home Directories Logging In to Mobile Accounts About External Accounts Resolving Sync ConflictsLogging In to External Accounts Advantages of Using Mobile Accounts Considerations and Strategies for Deploying Mobile AccountsApplications locally cache temporary files Considerations for Using Mobile Accounts You can manage individual mobile accounts138 Strategies for Syncing Content Mobile accounts can’t restore deleted files through syncingSetting Up Mobile Accounts for Use on Portable Computers Configuring Portable ComputersTo set up portable computers for use on your network Managing Mobile Clients Without Using Mobile Accounts Unknown Mac OS X Portable ComputersUsing Mac OS X Portable Computers with Multiple Users 143 Securing Mobile Clients Optimizing the File Server for Mobile AccountsTo optimize the file server for mobile accounts 146 Client Management Overview Using Network-Visible Resources There are several key network-visible resourcesCustomizing the User Experience Power of PreferencesLimits access Environment Control By letting you manageDesigning the Login Experience Key login settingsEnvironment Desired effect Choosing a Workgroup Working with Synced Homes Improving Workflow153 154 Using Workgroup Manager to Manage Preferences Preference pane What you can manageUnderstanding Managed Preference Interactions 157 158 Setting the Permanence of Management Understanding Hierarchical Preference ManagementPreference Management Basics Caching PreferencesManaging User Preferences To manage user preferencesTo manage group preferences Managing Group PreferencesManaging Computer Preferences To manage computer preferencesManaging Computer Group Preferences Disabling Management for Specific PreferencesTo manage computer group preferences Managing Access to Applications To selectively disable preference managementWhat you can control Icon Indicates the application has this type of signatureTo allow users to open specific applications and folders Allowing Specific Dashboard Widgets To allow specific Dashboard widgetsTo disable Front Row Disabling Front RowTo set up a list of accessible applications Managing Classic PreferencesSelecting Classic Startup Options To work with various startup options for ClassicClassic preference pane What you can control Choosing a Classic System Folder Allowing Special Actions During RestartTo choose a specific Classic System Folder Controlling Access to Classic Apple Menu Items To allow special actions during restartTo hide or show items in the Apple menu Adjusting Classic Sleep Settings To adjust Classic sleep settingsMaintaining Consistent User Preferences for Classic To choose where Classic user preferences are storedManaging Dock Preferences Controlling the User’s DockProviding Easy Access to Group Folders To add a Dock item for a group folderAdding Items to a User’s Dock To add items to a user’s DockManaging Energy Saver Preferences Preventing Users from Adding or Deleting Dock ItemsTo prevent users from adding items to their Docks Using Sleep and Wake Settings for Desktop Computers To set sleep and wake settingsSetting Energy Saver Settings for Portable Computers To manage portable computer settingsDisplaying Battery Status to Users To show battery status in the menu bar Scheduling Automatic Startup, Shutdown, or SleepTo schedule automatic actions Setting Up Simple Finder Managing Finder PreferencesFinder preference pane What you can control To hide disk and server icons on the desktop Controlling the Behavior of Finder WindowsTo turn on Simple Finder To set Finder window preferencesTo hide the Trash warning message Hiding the Alert Message When a User Empties the TrashMaking Filename Extensions Visible To make filename extensions visibleControlling User Access to Remote Servers Controlling User Access to an iDiskPreventing Users from Ejecting Discs To hide the Burn Disc command Hiding the Burn Disc Command in the FinderControlling User Access to Folders To hide the Go to Folder commandRemoving Restart and Shut Down from the Apple Menu Adjusting the Appearance and Arrangement of Desktop ItemsTo hide the Restart and Shut Down commands To set preferences for the desktop viewAdjusting the Appearance of Finder Window Contents Login preference pane What you can control Managing Login PreferencesChanging the Appearance of the Login Window List setting Mac OS X version EffectTo change the appearance of the Login Window Configuring Miscellaneous Login Options Option What this does when enabledTo configure miscellaneous login options Choosing Who Can LogCustomizing the Workgroups Displayed at Login To choose who can logEnabling the Use of Login and Logout Scripts To customize the workgroups displayed at loginTo enable the use of login or logout scripts Trust value name RequirementsChoosing a Login or Logout Script Click EditTo choose login or logout scripts Automatically Opening Items After a User LogsTo set an item to open automatically Providing Access to a User’s Network Home Folder Providing Easy Access to the Group Share Point To add a login item for the group share pointTo automatically mount the Network Home Managing Media Access Preferences Controlling Access to CDs, DVDs, and Recordable DiscsTo control access to disc media To restrict access to internal and external disks Controlling Access to Hard Drives, Disks, and Disk ImagesEjecting Removable Media Automatically When a User Logs Out To automatically eject removable mediaManaging Mobility Preferences Creating a Mobile AccountMobility preference pane What you can control To create a mobile account using Workgroup Manager Preventing the Creation of a Mobile AccountManually Removing Mobile Accounts from Computers To prevent the creation of mobile accountsTo remove a mobile account Enabling FileVault for Mobile Accounts OptionEffectTo enable FileVault for mobile accounts Home folder location Description Selecting the Location of a Mobile AccountTo select the location of a mobile account Type Name PrivilegeCreating External Accounts To create an external accountSetting Expiration Periods for Mobile Accounts To set an expiration period Stopping Files from Syncing for a Mobile Account To stop files from syncingSetting the Background Sync Frequency Showing Mobile Account Status in the User’s Menu BarTo set the frequency for syncing background folders To show mobile account status in the user’s menu bar Configuring Proxy Servers by PortManaging Network Preferences Network preference pane What you can controlTo configure proxy servers for a user or a group To choose the domains that users can access directlyAllowing Users to Bypass Proxy Servers for Specific Domains To disable Internet Sharing Enabling Passive FTP ModeTo enable passive FTP mode Disabling Internet SharingTo disable Bluetooth Disabling BluetoothTo disable AirPort Disabling AirPortManaging Parental Controls Preferences Preventing Access to Adult WebsitesTo prevent access to specific websites Hiding Profanity in DictionaryAllowing Access Only to Specific Websites To allow access only to specific websitesSetting Time Limits and Curfews on Computer Usage Managing Printing Preferences To set time limits and curfewsPrinting preference pane What you can control Preventing Users from Modifying the Printer List To restrict access to the printer listMaking Printers Available to Users To create a printer list for usersRestricting Access to Printers Connected to a Computer Setting a Default PrinterTo set the default printer Adding a Page Footer to All Printouts Restricting Access to PrintersTo restrict access to a specific printer To add a footer to all printoutsManaging Software Update Preferences Managing Access to System PreferencesTo manage access to Software Update servers To manage access to System Preferences Managing Time Machine PreferencesTo manage Time Machine preferences Managing Universal Access Preferences Adjusting the User’s Display SettingsUniversal Access Preference pane What you can control To adjust screen appearance Setting a Visual AlertAdjusting Keyboard Accessibility Options To set a flashing alertTo set the way the keyboard responds to keystrokes Option EffectAdjusting Mouse and Pointer Responsiveness Enabling Universal Access ShortcutsTo control mouse and pointer settings Allowing Devices for Users with Special Needs Using the Preference Editor with Preference ManifestsTo allow Universal Access Shortcuts To allow assistive devicesAdding to the Preference Editor’s List To add to the preference editor’s list Frequency DescriptionEditing Application Preferences with the Preference Editor To edit application preferencesTo disable management of an application’s preferences Using the Preference Editor to Manage Core Services Manifest Examples of things you can changeUsing the Preference Editor to Manage Safari To add Safari to the preference editor list238 Diagnosing Common Network Issues Testing Your Network’s Time and Time ZonesTesting Your DNS Service To test your network’s DNS service on a single computerTesting Your Dhcp Service To test your network’s Dhcp service on a single computerIf Users Can’t See Their Names in the Login Window Solving Account ProblemsIf You Can’t Edit an Account Using Workgroup Manager If You Want to Use Earlier Versions of Workgroup ManagerIf You Can’t Modify a User’s Open Directory Password If You Can’t Assign Server Administrator PrivilegesIf Users Can’t Log In or Authenticate If Users Relying on a Password Server Can’t Log If Users Can’t Change Their Passwords Problems with a Primary or Backup Domain ControllerIf Users Can’t Access Their Home Folders If a Windows User Can’t Log in to the Windows DomainIf a Windows User’s Profile Settings Revert to Defaults If a Windows User Has No Home FolderIf Users Don’t See a List of Workgroups at Login Solving Preference Management ProblemsTesting Your Managed Client Settings To view managed client settings in System ProfilerIf Login Items Added by a User Don’t Open If Users Can’t Add Printers to a Printer ListIf Items Placed in the Dock by a User Are Missing If a User’s Dock Has Duplicate ItemsIf Users See a Question Mark in the Dock If Users See a Message About an Unexpected Error If You Can’t Manage Network ViewsImporting and Exporting Account Information Understanding What You Can Import and ExportLimitations for Importing and Exporting Passwords Using Workgroup Manager to Import Accounts To import accounts using Workgroup ManagerArchiving the Open Directory Master Using Workgroup Manager to Export Accounts To export accounts using Workgroup Manager Using XML Files Created with AppleShare IP Access control list See ACL Apple Filing Protocol See AFPSee also computer list Directory node See directory domainFull name See long name Globally unique identifier See Guid Home directory See home folder Local home directory See local home folder 262 Primary domain controller See PDC Search path See search policy Security identifier See SIDWeblog See blog 266 Index 268 269 270 271 272 273 274 275