Apple Mac OS X Server (version 10.2.3 or later) - Manual (Page 143)

Users and Groups 143
6 Click Privileges to specify what the user should be able to administer in the domain. By
default, the user has no directory domain privileges.
7 To work with privileges to change user, group, or computer accounts, click the Users,
Groups, or Computers tab, respectively.
8 Select a checkbox to indicate whether you want the user to be able to change account and/or
preference settings. If a box is not checked, the user can view the account or preference
information in Workgroup Manager, but not change it.
9 Select “For all ...” to allow the user to change information for all users, groups, or computers
in the directory domain.
Select “For ... below” to limit the items a user can change to the list on the right. To add an
item to the list, drag it to the “Available” list. To remove an item from the list, press the Delete
key on the keyboard.
10 To give the user the ability to add and delete users, groups, or computer accounts, check the
“Edit ... accounts” box and select “For all ...”.
If a directory domain has associated with it a Password Server, you can make the domain
administrator a Password Server administrator. See “Assigning Administrator Rights for a
Password Server” on page 201 for instructions.
Working With Advanced Settings for Users
Advanced settings include login settings, password validation policy, and a comment.
In Workgroup Manager, use the Advanced tab in the user account window to work with
advanced settings.
Defining Login Settings
By specifying user login settings, you can
m Control whether the user can be authenticated using the account.
m Allow a managed user to simultaneously log in to more than one managed computer at a
time or prevent the user from doing so.
m Indicate whether a user of a managed computer can or must select a workgroup during
login or whether you want to avoid showing workgroups when the user logs in.
m Identify the default shell the user will use for command-line interactions with Mac OS X,
such as /bin/csh or /bin/tcsh. The default shell is used by the Terminal application on the
computer the user is logged in to, but Terminal has a preference that lets you override the
default shell. The default shell is used by SSH (Secure Shell) or Telnet when the user logs
in to a remote Mac OS X computer.
LL0395.Book Page 143 Wednesday, November 20, 2002 11:44 AM