94
5To create a group, click the Groups button.
6In the Members pane, click the Add (+) button to open a drawer that lists the users and groups defined in the directory domain you’re working with.
Make sure the group account resides in a directory domain specified in the search policy of computers the user logs in to.
The drawer lists user and group accounts. Click the Groups button in the drawer to list group accounts.
7Drag the group from the drawer to the Members list.
All members of the hierarchical group also become members of the parent group.
8Click Save.
From the Command Line
You can also create a hierarchical group account using the dseditgroup command in Terminal. For more information, see the users and groups chapter of
Upgrading Legacy Groups
When you upgrade from Mac OS X Server v10.3 or earlier, or when you import groups created using Workgroup Manager v10.3 or earlier, existing groups can’t use hierarchical preference management unless you first convert them.
Upgrading legacy groups does not negatively affect group members with client computers running previous versions of Mac OS X.
To convert a legacy group to an upgraded group account:
1In Workgroup Manager, click Accounts.
2Make sure that the directory services of the Mac OS X Server computer you’re using are configured to access the directory domain.
For instructions, see Open Directory Administration.
3Click the globe icon and choose the domain where the group account resides.
4To authenticate, click the lock and enter the name and password of a directory domain administrator.
5Click the Groups button and select the legacy group you want to upgrade.
6In the Members pane, click the Upgrade Legacy Group button and then click Save.
Working with Read-Only Groups
You can use Workgroup Manager to review information for group accounts stored in
Chapter 5 Setting Up Group Accounts