Filter
Top Products
94 Chapter 5 Setting Up Group Accounts
5 To create a group, click the Groups button.
6 In the Members pane, click the Add (+) button to open a drawer that lists the users and
groups defined in the directory domain you’re working with.
Make sure the group account resides in a directory domain specified in the search
policy of computers the user logs in to.
The drawer lists user and group accounts. Click the Groups button in the drawer to list
group accounts.
7 Drag the group from the drawer to the Members list.
All members of the hierarchical group also become members of the parent group.
8 Click Save.
From the Command Line
You can also create a hierarchical group account using the dseditgroup command in
Terminal. For more information, see the users and groups chapter of Command-Line
Administration.
Upgrading Legacy Groups
When you upgrade from Mac OS X Server v10.3 or earlier, or when you import groups
created using Workgroup Manager v10.3 or earlier, existing groups can’t use
hierarchical preference management unless you first convert them.
Upgrading legacy groups does not negatively affect group members with client
computers running previous versions of Mac OS X.
To convert a legacy group to an upgraded group account:
1 In Workgroup Manager, click Accounts.
2 Make sure that the directory services of the Mac OS X Server computer you’re using are
configured to access the directory domain.
For instructions, see Open Directory Administration.
3 Click the globe icon and choose the domain where the group account resides.
4 To authenticate, click the lock and enter the name and password of a directory domain
administrator.
5 Click the Groups button and select the legacy group you want to upgrade.
6 In the Members pane, click the Upgrade Legacy Group button and then click Save.
Working with Read-Only Groups
You can use Workgroup Manager to review information for group accounts stored in
read-only directory domains. Read-only directory domains include LDAPv2 domains,
LDAPv3 domains not configured for write access, NIS domains, and BSD configuration
files.