Apple Mac OS X Server (version 10.2.3 or later) - Manual (Page 167)

Users and Groups 167
Administering Group Accounts
This section describes how to administer group accounts stored in various kinds of directory
domains.
Where Group Accounts Are Stored
Group accounts, as well as user accounts and computer accounts, can be stored in any Open
Directory domain accessible from the Mac OS X computer that needs to access the account.
A directory domain can reside on a Mac OS X computer (for example, a NetInfo or LDAPv3
domain) or it can reside on a non-Apple server (for example, an LDAP or Active Directory
server).
You can use Workgroup Manager to work with accounts in all kinds of directory domains, but
you can update only NetInfo and LDAPv3 directory domains using Workgroup Manager.
See Chapter 2, “Directory Services,” for complete information about the different kinds of
Open Directory domains.
Creating Group Accounts in a Directory Domain on Mac OS X Server
You need administrator privileges for a directory domain to create a new group account in it.
To create a group account:
1 Ensure that the directory services of the Mac OS X Server you are using has been configured
to access the domain of interest. See Chapter 2, “Directory Services,” for instructions.
2 In Workgroup Manager, click the Accounts button.
3 Use the At pop-up menu to open the domain in which you want the group account to reside.
4 Click the lock to be authenticated as a directory domain administrator.
5 Click the group list tab.
6 From the Server menu, choose New Group.
7 Specify settings for the group in the tabs provided.
You can also use a preset or an import file to create a new group. See “Using Presets” on
page 179 and “Importing and Exporting User and Group Information” on page 181 for
details.
LL0395.Book Page 167 Wednesday, November 20, 2002 11:44 AM