Apple Mac OS X Server (Administrator’s Guide) - Manual (Page 146)

146 Chapter 3
6 Click Privileges to specify what the user should be able to administer in the domain. By
default, the user has no directory domain privileges.
7 To work with privileges to change user, group, or computer accounts, click the Users,
Groups, or Computers tab, respectively.
8 Select a checkbox to indicate whether you want the user to be able to change account and/or
preference settings. If a box is not checked, the user can view the account or preference
information in Workgroup Manager, but not change it.
9 Select “For all ...” to allow the user to change information for all users, groups, or computers
in the directory domain.
Select “For ... listed below” to limit the items a user can change to the list on the right. To add
an item to the list, double-click the item in the “Available” list. To remove an item from the
list, double-click it.
10 To give the user the ability to add and delete users, groups, or computer accounts, check the
“Edit ... accounts” box and select “For all ...” .
Working With Advanced Settings for Users
Advanced settings include login settings, password validation policy, and a comment.
In Workgroup Manager, use the Advanced tab in the user account window to work with
advanced settings.
Defining Login Settings
By specifying user login settings, you can
m Control whether the user can be authenticated using the account.
m Allow a managed user to simultaneously log in to more than one managed computer at a
time or prevent the user from doing so.
m Indicate whether a user of a managed computer can or must select a workgroup during
login or whether you want to avoid showing workgroups when the user logs in.
m Identify the default shell the user will use for command-line interactions with Mac OS X,
such as /bin/csh or /bin/tcsh. The default shell is used by the Terminal application on the
computer the user is logged in to, but Terminal has a preference that lets you override the
default shell. The default shell is used by SSH (Secure Shell) or Telnet when the user logs
in to a remote Mac OS X computer.
You can use Workgroup Manager to define login settings of an account stored in a NetInfo or
LDAPv3 directory domain or to review login settings in any directory domain accessible from
the server you are using.