Manuals / Apple / Baby / Model Vehicle

Apple 10.5 Leapard manual Predefined User Accounts, User ID

Models: 10.5 Leapard

1 275

Download 275 pages 23.09 Kb

Page 56

56

A Windows user account that is not stored in the PDC server’s LDAP directory can be used to access other services. For example, Mac OS X Server can authenticate users with accounts in the server’s local directory domain for the server’s Windows file service.

Mac OS X Server also authenticates users with accounts on other directory systems, such as an Open Directory master on another Mac OS X Server system, or Active Directory on a Windows server.

For complete information about the different kinds of directory domains, see Open Directory Administration.

Predefined User Accounts

The following table describes user accounts that are created when you install Mac OS X Server (unless otherwise indicated). For a complete list, open Workgroup Manager and choose View > Show System Users and Groups.

Predefined user name	Short name	User ID	Use
MySQL Server	mysql	74	The user that the MySQL database server uses for
			its processes that handle requests.

sshd Privilege	sshd	75	The user for the sshd child processes that process
separation			network data.

System Administrator	root	0	A user with no protections or restrictions.

System Services	daemon	1	A legacy UNIX user.

Unknown User	unknown	99	A user with no login or password. When files or
			volumes have no real owner, they are assigned
			unknown as their owner.

Unprivileged User	nobody	-2	This user was originally created so system services
			didn’t need to run as System Administrator. Now
			service-specific users such as World Wide Web
			Server are often used for this purpose.

World Wide Web Server	www	70	The nonprivileged user that Apache uses for its
			processes that handle requests.

Chapter 4 Setting Up User Accounts

Image 56

Apple 10.5 Leapard manual Predefined User Accounts, User ID

Contents

Mac OS X Server 019-0938/2007-09-01 Contents Configuring the Administrator’s Computer and Account Setting Up an Administrator ComputerCreating a Domain Administrator Account Using Workgroup ManagerContents Setting Up Group Accounts Where Group Accounts Are StoredAdministering Group Accounts Creating a Preset for Group Accounts118 Chapter Contents Contents If You Can‘t Change a User’s Password Type to Open Directory 257 267About This Guide What’s New in Workgroup ManagerWhat’s in This Guide To see the most recent server help topics Using Onscreen HelpTo get help for an advanced configuration of Leopard Server Mac OS X Server Administration Guides This guide Tells you how toUser Management Getting Documentation Updates Getting Additional InformationTools for User Management Workgroup ManagerServer Admin See this documentServer Preferences NetBootNetInstall Command-Line Tools AccountsAdministrator Accounts Server AdministrationUser Accounts Guest AccountGroup Accounts Computer AccountsComputer Groups Authentication and Identity ValidationUser Experience Information Access Control Folder and File Owner Access ACLs and Posix Permissions User Management Overview Setup Overview Getting Started with User ManagementSet up an administrator computer Create user accounts and home folders Planning Strategies for User Management Analyzing Your EnvironmentIdentifying Directory Services Requirements Determining Server and Storage RequirementsChoosing a Home Folder Structure Users with local accounts typically have local home foldersDevising a Home Folder Distribution Strategy Determining Administrator Requirements Identifying GroupsGetting Started with User Management Getting Started with User Management To set up an administrator computer Configuring the Administrator’s Computer and AccountSetting Up an Administrator Computer To create a domain administrator account Using Workgroup ManagerCreating a Domain Administrator Account To connect and authenticate to directory domains Major Workgroup Manager Tasks Preference Description Modifying Workgroup Manager PreferencesTo set Workgroup Manager preferences Listing Accounts in the Local Directory Domain Finding and Listing AccountsWorking with Account Lists in Workgroup Manager Listing Accounts in Search Policy Directory Domains To list accounts in a server’s local directory domainFinding Specific Accounts in a List Listing Accounts in Available Directory DomainsRefreshing Account Lists To do this Do this Using Advanced SearchTo filter items in the list of accounts Sorting Users and Groups Using PresetsShortcuts for Working with Accounts Editing Multiple Accounts Simultaneously Interface element Mixed-state appearanceTo batch-edit accounts that match specific criteria Importing and Exporting Account Information Getting Started with Workgroup Manager Where User Accounts Are Stored About User AccountsPredefined User Accounts User IDTo create a user account Administering User AccountsCreating User Accounts Editing User Account Information To make changes to a user accountTo work with a read-only user account Working with Read-Only User AccountsWorking with Guest Users To delete a user account using Workgroup Manager Working with Windows User AccountsDeleting a User Account Disabling a User AccountTo create a preset for user accounts Working with PresetsCreating a Preset for User Accounts Using Presets to Create Accounts Renaming PresetsEditing Presets To create an account using a presetWorking with Basic Settings Deleting a PresetTo edit a preset To delete a presetTo work with the user name using Workgroup Manager Modifying Short NamesTo work with a user short name using Workgroup Manager Choosing Stable Short NamesAvoiding Duplicate Names Modifying User IDs To change a user ID in Workgroup ManagerAssigning a Password to a User Assigning Administrator Privileges for a ServerTo assign a password To set server administrator privileges in Workgroup ManagerChoosing a User’s Login Picture To change a user’s login pictureRemoving Administrative Privileges from a User Giving a User Limited Administrative CapabilitiesTo remove a user’s administrative privileges Working with PrivilegesTo add limited administrative capabilities Task DescriptionWorking with Advanced Settings Giving a User Full Administrative CapabilitiesTo change a user’s administrative privileges To enable a user’s calendarChoosing a Default Shell To choose a default shellChoosing a Password Type and Setting Password Options To choose a user password type and set password optionsTo edit the master keyword list Creating a Master List of KeywordsApplying Keywords to User Accounts To work with keywords for a user account To work with a comment using Workgroup ManagerEditing Comments Choosing a User’s Primary Group Working with Group SettingsTo set a primary group ID using Workgroup Manager Adding a User to a Group To review group memberships using Workgroup ManagerReviewing a User’s Group Memberships Working with Home Settings To add a user to a group using Workgroup ManagerTo remove a user from a group using Workgroup Manager Removing a User from a GroupWorking with Mail Settings Enabling Mail Service Account OptionsWorking with Print Quota Settings Disabling a User’s Mail ServiceTo disable a user’s mail service using Workgroup Manager To forward a user’s mail using Workgroup ManagerEnabling a User’s Access to All Available Print Queues Enabling a User’s Access to Specific Print QueuesResetting a User’s Print Quota To delete a user’s print quota using Workgroup ManagerTo restart a user’s print quota using Workgroup Manager Removing a Print Quota For a QueueWorking with Info Settings To disable a user’s access to print queues enforcing quotasTo change a user’s info Working with Windows SettingsChanging a Windows User’s Profile Location Changing a Windows User’s Login Script Location Working with GUIDs Changing a Windows User’s Home Folder Drive LetterChanging a Windows User’s Home Folder Location Viewing GUIDsTo view a user or group Guid About Group Accounts How Group Accounts Track MembershipPredefined Group name Group ID Use Where Group Accounts Are StoredPredefined Group Accounts To create a group account Administering Group AccountsCreating Group Accounts Creating a Preset for Group Accounts To create a preset for group accountsEditing Group Account Information To make changes to a group accountCreating Hierarchical Groups To create a hierarchical groupWorking with Read-Only Groups To convert a legacy group to an upgraded group accountUpgrading Legacy Groups Working with Basic Settings for Groups To delete a group using Workgroup ManagerDeleting a Group Naming a GroupTo work with group names using Workgroup Manager Defining a Group IDTo choose a group’s login picture Choosing a Group’s Login PictureTo work with a group ID using Workgroup Manager Enabling a Group’s Web Services To enable a group’s web servicesWorking with Member Settings for Groups Adding Users or Groups to a GroupTo remove group members Working with Group Folder SettingsRemoving Group Members To specify no group folder Specifying No Group FolderCreating a Group Folder 102 Designating a Group Folder for Use by Multiple Groups 104 Setting Up Computers Computer Groups About Computer AccountsCreating Computer Accounts To create a computer accountWorking with Windows Computers To set up the guest computer accountWorking with Guest Computers Administering Computer Groups About Computer GroupsDifferences Between Computer Groups and Computer Lists Creating a Computer GroupCreating a Preset for Computer Groups To set up a computer groupTo use a preset for computer groups Using a Computer Group PresetTo set up a preset for computer groups Adding Computers or Computer Groups to a Computer Group To add computers or computer groups to a computer groupTo upgrade computer lists to computer groups Deleting a Computer GroupUpgrading Computer Lists to Computer Groups To delete a computer groupSetting Up Home Folders About Home FoldersHosting Home Folders for Mac OS X Clients Hosting Home Folders for Other ClientsDistributing Home Folders Across Multiple Servers Administering Share Points Setting Up a Share PointTo set up a share point Unix Class Name PermissionSetting Up an Automountable AFP Share Point for Home Folders To set up an automountable AFP share point for home foldersSetting Up an Automountable NFS Share Point for Home Folders To set up an automountable NFS share point for home foldersSetting Up an SMB Share Point To create an SMB share point and set permissions To define no home folder Administering Home FoldersSpecifying No Home Folder Creating a Home Folder for a Local User To create a home folder for a local userCreating a Network Home Folder To create a network home folder for AFP or NFS share pointsCreating a Custom Location for Home Folders To create a custom home folder using Workgroup Manager Element Do this Setting Up a Home Folder for a Windows User To set up a home folder in an existing share point\\servername\usershortname Setting Disk Quotas Setting Disk Quotas for Windows Users to Avoid Data Loss Using Presets to Choose Default Home FoldersMoving Home Folders Deleting Home FoldersManaging Portable Computers About Mobile AccountsAbout Portable Home Directories Logging In to Mobile Accounts About External Accounts Resolving Sync ConflictsLogging In to External Accounts Applications locally cache temporary files Advantages of Using Mobile AccountsConsiderations and Strategies for Deploying Mobile Accounts Considerations for Using Mobile Accounts You can manage individual mobile accounts138 Strategies for Syncing Content Mobile accounts can’t restore deleted files through syncingTo set up portable computers for use on your network Setting Up Mobile Accounts for Use on Portable ComputersConfiguring Portable Computers Managing Mobile Clients Without Using Mobile Accounts Unknown Mac OS X Portable ComputersUsing Mac OS X Portable Computers with Multiple Users 143 Securing Mobile Clients Optimizing the File Server for Mobile AccountsTo optimize the file server for mobile accounts 146 Client Management Overview Using Network-Visible Resources There are several key network-visible resourcesPower of Preferences Limits accessCustomizing the User Experience Environment Control By letting you manageEnvironment Desired effect Designing the Login ExperienceKey login settings Choosing a Workgroup Working with Synced Homes Improving Workflow153 154 Using Workgroup Manager to Manage Preferences Preference pane What you can manageUnderstanding Managed Preference Interactions 157 158 Setting the Permanence of Management Understanding Hierarchical Preference ManagementPreference Management Basics Caching PreferencesManaging User Preferences To manage user preferencesManaging Group Preferences Managing Computer PreferencesTo manage group preferences To manage computer preferencesTo manage computer group preferences Managing Computer Group PreferencesDisabling Management for Specific Preferences Managing Access to Applications To selectively disable preference managementWhat you can control Icon Indicates the application has this type of signatureTo allow users to open specific applications and folders Allowing Specific Dashboard Widgets To allow specific Dashboard widgetsTo disable Front Row Disabling Front RowTo set up a list of accessible applications Managing Classic PreferencesClassic preference pane What you can control Selecting Classic Startup OptionsTo work with various startup options for Classic To choose a specific Classic System Folder Choosing a Classic System FolderAllowing Special Actions During Restart To hide or show items in the Apple menu Controlling Access to Classic Apple Menu ItemsTo allow special actions during restart Adjusting Classic Sleep Settings To adjust Classic sleep settingsTo choose where Classic user preferences are stored Managing Dock PreferencesMaintaining Consistent User Preferences for Classic Controlling the User’s DockProviding Easy Access to Group Folders To add a Dock item for a group folderAdding Items to a User’s Dock To add items to a user’s DockTo prevent users from adding items to their Docks Managing Energy Saver PreferencesPreventing Users from Adding or Deleting Dock Items Using Sleep and Wake Settings for Desktop Computers To set sleep and wake settingsSetting Energy Saver Settings for Portable Computers To manage portable computer settingsDisplaying Battery Status to Users To schedule automatic actions To show battery status in the menu barScheduling Automatic Startup, Shutdown, or Sleep Finder preference pane What you can control Setting Up Simple FinderManaging Finder Preferences Controlling the Behavior of Finder Windows To turn on Simple FinderTo hide disk and server icons on the desktop To set Finder window preferencesHiding the Alert Message When a User Empties the Trash Making Filename Extensions VisibleTo hide the Trash warning message To make filename extensions visiblePreventing Users from Ejecting Discs Controlling User Access to Remote ServersControlling User Access to an iDisk Hiding the Burn Disc Command in the Finder Controlling User Access to FoldersTo hide the Burn Disc command To hide the Go to Folder commandAdjusting the Appearance and Arrangement of Desktop Items To hide the Restart and Shut Down commandsRemoving Restart and Shut Down from the Apple Menu To set preferences for the desktop viewAdjusting the Appearance of Finder Window Contents Managing Login Preferences Changing the Appearance of the Login WindowLogin preference pane What you can control List setting Mac OS X version EffectTo change the appearance of the Login Window Configuring Miscellaneous Login Options Option What this does when enabledTo configure miscellaneous login options Choosing Who Can LogCustomizing the Workgroups Displayed at Login To choose who can logEnabling the Use of Login and Logout Scripts To customize the workgroups displayed at loginTo enable the use of login or logout scripts Trust value name RequirementsChoosing a Login or Logout Script Click EditTo set an item to open automatically To choose login or logout scriptsAutomatically Opening Items After a User Logs Providing Access to a User’s Network Home Folder To automatically mount the Network Home Providing Easy Access to the Group Share PointTo add a login item for the group share point To control access to disc media Managing Media Access PreferencesControlling Access to CDs, DVDs, and Recordable Discs Controlling Access to Hard Drives, Disks, and Disk Images Ejecting Removable Media Automatically When a User Logs OutTo restrict access to internal and external disks To automatically eject removable mediaMobility preference pane What you can control Managing Mobility PreferencesCreating a Mobile Account To create a mobile account using Workgroup Manager Preventing the Creation of a Mobile AccountTo remove a mobile account Manually Removing Mobile Accounts from ComputersTo prevent the creation of mobile accounts Enabling FileVault for Mobile Accounts OptionEffectTo enable FileVault for mobile accounts Selecting the Location of a Mobile Account To select the location of a mobile accountHome folder location Description Type Name PrivilegeCreating External Accounts To create an external accountSetting Expiration Periods for Mobile Accounts To set an expiration period Stopping Files from Syncing for a Mobile Account To stop files from syncingTo set the frequency for syncing background folders Setting the Background Sync FrequencyShowing Mobile Account Status in the User’s Menu Bar Configuring Proxy Servers by Port Managing Network PreferencesTo show mobile account status in the user’s menu bar Network preference pane What you can controlAllowing Users to Bypass Proxy Servers for Specific Domains To configure proxy servers for a user or a groupTo choose the domains that users can access directly Enabling Passive FTP Mode To enable passive FTP modeTo disable Internet Sharing Disabling Internet SharingDisabling Bluetooth To disable AirPortTo disable Bluetooth Disabling AirPortPreventing Access to Adult Websites To prevent access to specific websitesManaging Parental Controls Preferences Hiding Profanity in DictionaryAllowing Access Only to Specific Websites To allow access only to specific websitesSetting Time Limits and Curfews on Computer Usage Printing preference pane What you can control Managing Printing PreferencesTo set time limits and curfews To restrict access to the printer list Making Printers Available to UsersPreventing Users from Modifying the Printer List To create a printer list for usersTo set the default printer Restricting Access to Printers Connected to a ComputerSetting a Default Printer Restricting Access to Printers To restrict access to a specific printerAdding a Page Footer to All Printouts To add a footer to all printoutsTo manage access to Software Update servers Managing Software Update PreferencesManaging Access to System Preferences To manage access to System Preferences Managing Time Machine PreferencesTo manage Time Machine preferences Universal Access Preference pane What you can control Managing Universal Access PreferencesAdjusting the User’s Display Settings Setting a Visual Alert Adjusting Keyboard Accessibility OptionsTo adjust screen appearance To set a flashing alertTo set the way the keyboard responds to keystrokes Option EffectTo control mouse and pointer settings Adjusting Mouse and Pointer ResponsivenessEnabling Universal Access Shortcuts Using the Preference Editor with Preference Manifests To allow Universal Access ShortcutsAllowing Devices for Users with Special Needs To allow assistive devicesAdding to the Preference Editor’s List To add to the preference editor’s list Frequency DescriptionEditing Application Preferences with the Preference Editor To edit application preferencesTo disable management of an application’s preferences Using the Preference Editor to Manage Core Services Manifest Examples of things you can changeUsing the Preference Editor to Manage Safari To add Safari to the preference editor list238 Diagnosing Common Network Issues Testing Your Network’s Time and Time ZonesTesting Your DNS Service To test your network’s DNS service on a single computerTesting Your Dhcp Service To test your network’s Dhcp service on a single computerSolving Account Problems If You Can’t Edit an Account Using Workgroup ManagerIf Users Can’t See Their Names in the Login Window If You Want to Use Earlier Versions of Workgroup ManagerIf Users Can’t Log In or Authenticate If You Can’t Modify a User’s Open Directory PasswordIf You Can’t Assign Server Administrator Privileges If Users Relying on a Password Server Can’t Log Problems with a Primary or Backup Domain Controller If Users Can’t Access Their Home FoldersIf Users Can’t Change Their Passwords If a Windows User Can’t Log in to the Windows DomainIf a Windows User’s Profile Settings Revert to Defaults If a Windows User Has No Home FolderSolving Preference Management Problems Testing Your Managed Client SettingsIf Users Don’t See a List of Workgroups at Login To view managed client settings in System ProfilerIf Login Items Added by a User Don’t Open If Users Can’t Add Printers to a Printer ListIf Users See a Question Mark in the Dock If Items Placed in the Dock by a User Are MissingIf a User’s Dock Has Duplicate Items If Users See a Message About an Unexpected Error If You Can’t Manage Network ViewsImporting and Exporting Account Information Understanding What You Can Import and ExportLimitations for Importing and Exporting Passwords Archiving the Open Directory Master Using Workgroup Manager to Import AccountsTo import accounts using Workgroup Manager Using Workgroup Manager to Export Accounts To export accounts using Workgroup Manager Using XML Files Created with AppleShare IP Access control list See ACL Apple Filing Protocol See AFPSee also computer list Directory node See directory domainFull name See long name Globally unique identifier See Guid Home directory See home folder Local home directory See local home folder 262 Primary domain controller See PDC Search path See search policy Security identifier See SIDWeblog See blog 266 Index 268 269 270 271 272 273 274 275