Apple Mac OS X Server Print Service Administration For Version 10.4 or Later Uživatelský manuál stáhnout pdf (Strana 24)

24 Chapter 1 User Management Overview

Server Administration

Server administration privileges determine the powers a user has when logged in to a

particular Mac OS X Server. For example:

• A server administrator can use Server Admin and can make changes to a server’s

search policy using Directory Access.

• A server administrator can see all the AFP directories on the server (from a computer

other than the server), not just share points.

When you assign server administration privileges to a user, the user is added to the

predefined group named “admin” in the local directory domain of the server. Many

Mac OS X applications—such as Server Admin, Directory Access, and System

Preferences—use the admin group to determine whether a particular user can perform

certain administrative activities with the application. The primary Administrator

(“admin” user) is user ID 501 in the server's local directory.

Local Mac OS X Computer Administration

Any user who belongs to the group “admin” in the local directory domain of any

Mac OS X computer has administrator rights on that computer.

Directory Domain Administration

In Mac OS X Server, when you create a directory domain, a domain administrator

account is also created and added to the admin group in the domain. The UID of the

domain administrator defaults to 1000 when the account creation dialogue appears, at

which time you also have to set the name and password. The domain administrator

account is also a server administrator account, but the server administrator is not a

domain administer by default. Each directory has a separate domain administrator

account and a domain administrator can create additional administrators in the same

domain.

You can allow certain users to manage specific accounts. For example, you may want to

make a network administrator the server administrator for all your classroom servers,

but give individual teachers the privileges to manage student accounts in particular

directory domains. Any user who has a user account in a directory domain can be

made a directory domain administrator (an administrator of that domain).

You can control the extent to which a directory domain administrator can change

account data stored in a domain. For example, you may want to set up directory

domain privileges so your network administrator can add and remove user accounts,

but other users can change the information for particular users. Or you may want to

designate multiple administrators to manage different groups.

When you assign directory domain administration privileges to a user, the user is

added to the admin group of the server on which the directory domain resides.

1 2 ... 19 20 21 22 23 24 25 26 27 28 29 ... 231 232

Žádné komentáře

Apple Mac OS X Server Print Service Administration For Version 10.4 or Later Uživatelský manuál Strana 24