
40 Chapter 2 Getting Started With User Management
Pick a strategy before creating users. You can move home directories, but if you do, you
may need to change a large number of user records.
Determine the access protocol to use for the home directories. Most of the time you
will use AFP because it offers the greatest security. But you can use NFS (useful for UNIX
clients) and SMB/CIFS (for Windows clients).
Identifying Groups
Identify users with similar requirements and consider assigning them to groups. See
Chapter 5, “Setting Up Group Accounts.”
Determining Administrator Requirements
Decide which users you want to be able to administer accounts and make sure they
have domain administrator privileges.
The domain administrator has the greatest amount of control over other users and
their privileges. The domain administrator can create user accounts, group accounts,
and computer lists and assign settings, privileges, and managed preferences for them.
He or she can also create other server administrator accounts, or give some users (for
example, teachers or technical staff) administrative privileges within certain directory
domains.
Give some thought to which users require domain administrative privileges. Managed
users can be given various administrative privileges also, allowing them to manage
specific groups of users or adjust certain account settings. A well-planned hierarchy of
administrators and users with special administration privileges can help you distribute
system administration tasks and make workflows and system management more
efficient.
When you use Server Assistant to initially configure your server, you specify a password
for the owner/administrator. The password you specify also becomes the root password
for your server. Many server administrators don’t need knowledge of the root password,
but sometimes it’s necessary when using command-line tools (such as
CreateGroupFolder). For administrators who don’t need root access, use Workgroup
Manager to create an administrator user with a password that is different from the root
password.
The root password should be used with extreme caution and stored in a secure
location. The root user has full access to the system, including system files. If you need
to, you can use Workgroup Manager to change the root password.
Comentários a estes Manuais