Chapter 4. User and Group Management

Populating a server with all your users and groups can be a potentially daunting task. Fortunately, the Workgroup Manager application, which is used to manage users, groups, computers, and sharing services, has a well-designed interface. Apple's renowned ease of use is apparent: Many of the advanced configuration options are easily accessible in this interface.

Workgroup Manager also includes numerous efficiency-enhancing features. For example, you can quickly make widespread changes by selecting and configuring multiple accounts simultaneously. A User Presets tool that can decrease the amount of time it takes to create similar user accounts is also available. Furthermore, Workgroup Manager has an Import option that lets you input new users from many types of external sources.

Before you begin setting up accounts, take time to consider how you're going to organize your users and groups. Keep in mind that on Mac OS X Server, groups are used for more than just individual file and folder permissions; they're also used to define access to share points, Web sites, email groups, and managed workgroup settings. Also, if you're configuring users and groups on an Open Directory (OD) master, it's important to consider how your groups will integrate with client computers. Remember, any groups in a shared directory are accessible to computers that authenticate against your OD master.

The reason for creating users here is if that you have anything but local users (you must have a shared directory), you can manage specific settings for each user when they log in from a Mac OS X Client that has been bound to the Mac OS X Server on which you're working. In other words, they have no account on the Mac OS X Clientonly on the serverbut they can authenticate and log in.

(You may find that an organizational tool such as a group outline or flowchart software (such as Omni Graffle from http://www.omnigroup.com) can help you plan the best implementation for your needs.)