
74 Chapter 4 Setting Up User Accounts
Working With Advanced Settings for Users
Advanced settings include login settings, keywords, password validation policy, and a
comment field.
In Workgroup Manager, use the Advanced pane in the user account window to work
with advanced settings.
Defining Login Settings
By specifying user login settings, you can:
• Control whether the user can be authenticated using the account.
• Allow a managed user to simultaneously log in to more than one managed
computer at a time or prevent the user from doing so.
• Indicate whether a user of a managed computer can or must select a workgroup at
login or whether you want to avoid showing workgroups when the user logs in.
• Identify the default shell the user will use for command-line interactions with
Mac OS X, such as /bin/csh or /bin/bash (default). The default shell is used by the
Terminal application on the computer the user is logged in to, but Terminal has a
preference that lets you override the default shell. The default shell is used by SSH
(Secure Shell) or Telnet when the user logs in to a remote Mac OS X computer.
You can use Workgroup Manager to define login settings of an account stored in the
LDAP directory of an Open Directory master, a NetInfo domain, or other read/write
directory domain. You can also use Workgroup Manager to review login settings in any
directory domain accessible from the server you’re using.
To work with login settings using Workgroup Manager:
1 In Workgroup Manager, click Accounts.
2 Select the account you want to work with.
To select the account, click the small globe above the accounts list and choose the
directory domain where the account resides, and select the user in the user list.
3 To be authenticated, click the lock.
4 Click Advanced.
5 Select “Allow simultaneous login” to let a user log in to more than one managed
computer at a time.
Note: Simultaneous login is not recommended for most users. You may want to reserve
simultaneous login privileges for technical staff, teachers, or other users with
administrator privileges. (If a user has a network home directory, that’s where the user’s
application preferences and documents are stored. Simultaneous login may modify
these items; many applications don’t support such modification while they are open.)
You cannot disable simultaneous login for users with NFS home directories.
Komentáře k této Příručce