You need to register, or "create," the users who will get explicit access privileges to your network services. A registered user name must be entered each time the user logs on to an AppleShare IP server. You can also assign an Internet alias, a password, mail settings, group memberships, and comments for each user.
Note: If you followed the optional instructions in AppleShare IP Help to share users and groups information, you cannot use Remote Admin to modify users and groups information on secondary servers.
To create a new user, follow these steps: Click the Users button.
1
Log on to AppleShare IP Remote Admin.
2
3
Click the New User button.
4
Select the contents of the Name box, and type a new user name.
The name can be up to 27 characters long. The name is not case-sensitive.
5
To give this user an Internet alias, enter a name in the Internet
Alias text box.
An alias is recommended if the user name contains spaces or special
characters. The alias can have letters, numbers, and the following
characters:
! # $ % & ' * + - / = ? ` { } | ^ _ ~ .
For example, if the user name is Ethan Switzer, valid aliases
would include:
ethan1 or Ethan_Switzer
The alias is not case-sensitive. The user can enter this alias
to log on to the Web & File Server and the Print Server. The Mail
Server uses this alias to identify the user when the user's mail
application logs on to the Mail Server over TCP.
Note: The Internet alias cannot be the same as the name you enter in
the Name text box of any User window. That is, you cannot have
two users with the same name or Internet alias. If you want an
individual user's name and Intenet alias to be the same, don't
enter anything in the Internet Alias text box and make sure the
user's name conforms to the alias constraints described above.
6
To allow this user to administer all of the AppleShare IP servers,
select the "Enable user to administer the server" checkbox.
WARNING: Enabling other users to administer the AppleShare IP servers
can pose a serious security risk. Administrators can modify access
privileges set by other administrators and view everything on
the server. Assign this privilege carefully.
7
If you want to allow the user to make links to programs running
on the server, select the "Program linking" checkbox.
This privilege allows applications that use Apple Events or program
linking to communicate with applications running on any of the
servers. These applications may be able to gain access to sensitive
data. Enable this feature only if necessary.
8
To temporarily prevent the user from logging on, deselect the
"User may log on" checkbox.
You might want to prevent a user from logging on as a security
measure–for example, if he or she is a student who is away for
the summer.
Note: If you turn on mail for this user, the Mail Server will accept
his or her mail even when the user cannot log on.
When an administrator account is disabled, the administrator cannot
log on to administer a service over the network, but he or she
can log on to the computer that is running AppleShare IP.
9
To disable the user's account after a certain date, select the
"Disable log on" checkbox, then enter a date.
10
Click the Save & Continue button.
11
To require the user to enter a password before logging on, click
in the Password text box and type a password.
Assigning a password is highly recommended. For increased security,
use longer passwords that have letters and numbers. Avoid words
and names that can be easily guessed.
A password can be up to eight characters long. The password does
not appear on screen as you type.
Passwords are case-sensitive.
If the user will be logging on to this server to retrieve mail
or use FTP or Web services, don't use the space character or the
Option key. Some client applications do not recognize these characters.
Note: The main administrator (named as the owner of the computer) can
use his or her own password with any user's name to log on to
a server.
12
If you do not want the user to be able to change his or her password,
deselect the "User may change password" checkbox.
This attribute applies to users who log on to the Web & File Server
via the Chooser and to users of mail applications that allow users
to change their passwords. Users who connect to the Print Server
or log on to the Web & File Server via FTP or the Web cannot change
their passwords.
13
To require the user to change the password the next time he or
she logs on, select the "Require new password on next log on"
checkbox.
When this attribute is enabled, you can assign a simple password
(such as the user's initials or first name) but require that the
user change the password to something more secure when logging
on to the Web & File Server via the Chooser. (The ability to require
a new password only applies to AppleShare file sharing services.)
IMPORTANT: Do not turn on this attribute for non-Mac OS users, or clients
using the Print Server, Mail Server, FTP, or Web services. These
users may not be able to receive messages indicating that a new
password is necessary.
Note: Users cannot change passwords when logging onto a secondary server
that is sharing users and groups.
14
Click the Save & Continue button.
15
To make notes about this user's account, type in the Comment text
box.
For example, you may want to note the user's title, address, phone
number, or initial password setting.
16
Click the Save & Continue button.
17
Choose mail options for this user. You can provide mail service,
forward mail to another server, or disable mail service for this
user.
To allow this user to connect to your AppleShare IP Mail Server
for mail service, select "User can receive mail via."
To prevent the user from connecting to this computer for mail
service, select "User has no mail." The Mail Server will not allow
the user to log on and will not accept additional mail for the
user. Now skip to step 23.
To forward this user's mail to a different SMTP mail server, select
"Forward the user's mail to". Then select Internet or AppleTalk
and enter a forwarding address. (For detailed instructions, see
step 5 in "Forwarding mail addressed to local users.") Now skip to step 23.
18
Select a type of mail box for this user: POP only, IMAP only,
or POP and IMAP.
Select "POP only" if this user will be reading messages with e-mail
applications that use the POP protocol and you want all mail for
this user downloaded onto the user's computer.
Select "IMAP only" if this user will be reading messages with
e-mail applications that use the IMAP protocol and you want the
mail for this user to be stored on the Mail Server.
Select "Both POP and IMAP" if this user will be reading messages
with e-mail applications that use the IMAP and POP protocols.
19
If you want this user to have separate mailboxes for POP and IMAP
mail, select the "Use separate inboxes for POP and IMAP" checkbox.
This feature may be useful if your users will be accessing their
mail from multiple locations (such as home and work).
IMPORTANT: If you turn on separate mailboxes, duplicate mail messages are
stored on the Mail Server, one in each mailbox (IMAP and POP).
If the user checks IMAP but not POP, mail will accumulate on the
server. The safest choice is to use only one e-mail client and
have a single mailbox. If both mail protocols need to be supported,
select the combined IMAP and POP mailboxes.
20
If you want this user to see the POP mailbox in the IMAP folder
list, select the "Show POP mailbox in IMAP folder list" checkbox.
When this feature is enabled, users can view and modify messages
in the POP mailbox before downloading messages with their mail
applications. This is useful if users want to see their mail from
home but only download it at work.
21
If the user's client mail application can be configured for APOP,
select the "Require APOP Log On (Encrypted Password)" checkbox.
APOP is a protocol that sends the user's password in encrypted
form for extra security.
22
To notify the user when he or she receives mail, select the "Enable
NotifyMail" checkbox.
When mail addressed to the user arrives at the Mail Server, a
message is sent to the indicated IP address. This feature requires
the NotifyMail™ (or compatible) software installed and enabled
on the client computer.
23
Click the Save & Continue button.
24
Decide whether to add this user to an existing group or to a group
that's not yet created, or not add the user to a group. (A group
is two or more users who have some characteristic in common–same
work group or location, similar access privilege needs, etc.)
To add this user to an existing group, select the group in the
Groups list, then click the Add button. Continue to add groups
to this user until you're finished, then go to step 25.
The groups you've selected appear in the list labeled "Is A Member
Of." To remove the user from a group, select the group and click the
Remove button.
If the user's group is not yet created, click the Done button.
Then see Creating groups.
If you do not want to add this user to a group, click the Done
button. You're done creating this user.
25
When you're done adding groups to this user's Groups Membership
list, click Done.
IMPORTANT: The information for this user is saved in the Users & Groups Data File on the server. This information is critical to the operation of your servers. Make backup copies of this file regularly. For instructions, go to the server and open AppleShare IP Help.
Table of contents