Typical Macintosh Manager Settings at a K-6 school for Restricted Finder.

This is a very brief treatise on how to setup Macintosh Manager under Mac OS X Server v10.3.x.

You should update your server to the latest version and then change the role of your server in the Open Directory service from Standalone to Open Directory Master. After changing that you should reboot the server just in case things don't stick without it.


If you're going to share this server with Mac OS X clients you'll need to set the automount record for the user's home folders.


Under Mac OS X Server v10.3.x the Macintosh Manager checkbox is under the main server settings in the Advanced tab.

You'll want to import your users from your student database and you can use Richard Maclemale's MM Import Helper 2 application to get your users into Workgroup Manager.

Use Workgroup Manager's Import function to get your hundreds of accounts into the server directory (user directory that is)

User settings are usually the same within a workgroup.

You can import your users from Workgroup Manager to Macintosh Manager using drag and drop.  If you use the Import All button you will also get the system users (UIDs less than 100).

These screen shots are taken from every tab/screen available in Macintosh Manager Admin v2.3 (v2.2.2 under Mac OS 9)

You can double-click users to add them to the Workgroup Members list.


Add the applications that are approved for use for this workgroup.
This screen has a lot to it. Use caution here. Some applications will freak when you turn on file level security. I've heard reports of problems with Desktop Printers when the Desktop is locked.
The rest of the items are pretty self-explanatory.
You will have to go to the Finder to mount other volumes so they are available in the Volumes selection box.


After the volume has been added you should specify  the options for Auto log-in and AFP Privileges.
The simplest way to configure printers is to allow members to print using the printer already selected on that machine (using System Access)


You must specify here as well as in the Global section to have the preferences copy. Both radio buttons together enable preference management.


This is the default setting for Computer Lists. We'll leave it alone to keep things simple.
This is also the default setting for Workgroups. We'll leave it alone to simplify.
Some applications may not work properly is the hard disk name is not the same as when the original preference specified.  To ensure consistent behavior from your applications force the hard disk name.
If the server becomes unavailable - and there is always  a chance of that - allow your users to work offline.
Picking your name from a list is easier.
This screen is set to the default.
This is another key screen. You should set the bottom radio button for copying user preferences. The top radio button is the default but greatly increases login times.
This screen is set to the default.