Apple Mac OS X Server (Administrator’s Guide) - Manual (Page 281)

Client Management: Mac OS X 281
m The user does not have administrator privileges, but has a local account.
Set up a local administrator account on the computer (do not give the user information
about this account), then set up a local account for the user. Users with local accounts
that do not have administrator privileges cannot install software and can only add or
delete items in their own home directories. A local user can share items with other local
users by using the Public folder in his or her local home directory.
m The user is the administrator for the computer.
If the user is the local administrator, he or she can choose during login whether or not to
be managed. For example, in order to access servers at school, the user should choose to
be managed at login, but at home he or she may prefer not to be managed since access to
the school servers may not be available.
If the user also has a Mac OS X Server user account and network access is available, it may
still be preferable to log in using the local account in order to reduce network traffic. The
user can connect to his or her network home directory (to store or retrieve documents,
for example) via the “Go to Folder” command in the Finder’s Go menu.
Using Wireless Services
You can provide wireless network service to managed clients using AirPort, for example.
When a user with a portable computer leaves the wireless area or changes to a different
network directory server (by moving out of one wireless area and into another), client
management settings may be different. Users may notice that some network services, such as
file servers, printers, shared group volumes, and so forth, are unavailable from the new
location. Users can purge these unavailable resources by logging out and logging in again.
If you need more information about using Airport, consult Airport documentation or visit the
Web site:
www.apple.com/airport/
How Workgroup Manager Works With System Preferences
Workgroup Manager allows administrators to set and lock certain system settings for users on
their network. You can set preferences once and allow users to change them, you can keep
preferences under administrative control at all times and allow no user changes, or you can
choose not to impose any settings at all.