Apple Mac OS X Server (Administrator’s Guide) - Manual (Page 432)

432 Chapter 10
A Macintosh Manager administrator’s administrative privileges do not apply in Mac OS X
Workgroup Manager tools. For example, a Macintosh Manager administrator cannot create
user accounts in Workgroup Manager (unless he or she also has a Mac OS X server
administrator account).
Allowing Mac OS X Server Administrators to Use Macintosh Manager Accounts
Because Macintosh Manager is disconnected from data (other than the user ID) used by
Workgroup Manager, Mac OS X Server administrator accounts are imported to Macintosh
Manager as regular users. They may not be able to access their home directories when they
log in to client computers, and they will not automatically have administrative privileges in
Macintosh Manager. They cannot access the Macintosh Manager share point or set up
managed preferences.
You should create a separate Mac OS X Server user account for any server administrators you
want to include in Macintosh Manager, and then import those accounts. If you want to give
these users full administrative privileges in Macintosh Manager, follow the instructions for
“Creating a Macintosh Manager Administrator” on page 432.
About Workgroup Administrators
Workgroup administrators can add or modify user accounts and workgroups according to
privileges assigned to them. Regardless of privileges, they cannot change a user’s type or
change access settings, and they cannot create Finder workgroups.
Workgroup administrators also have access to shared folders, such as hand-in folders, which
can be used to collect documents from users. In a school environment, for example, teachers
who are workgroup administrators can distribute and collect assignments over the network.
A teacher can also make available various network resources, applications, and CDs that
promote teaching objectives for the class.
Creating a Macintosh Manager Administrator
You should create at least one Macintosh Manager administrator to prevent users from
bypassing security and changing to a different Macintosh Manager server.
To designate a Macintosh Manager administrator:
1 In Macintosh Manager, click Users.
2 Select one or more users in the Imported Users list.
3 Change the user type to Macintosh Manager Administrator, then click Save.
Creating a Workgroup Administrator
You can set up workgroup administrator accounts for people (such as teachers or technical
coordinators) who may need to add or modify certain user accounts or workgroups.