Del Mar College CIS 306 - Managing NOVELL® Networks Instructor: Michael P. Harris
IntranetWare 4.11

IntranetWare Administration Guide

2. Setting Up and Managing Users and Groups

Introduction

This section describes the preparation and procedures to set up and manage users and groups on an IntranetWare^TM for Small Business network using the NovellŪ Easy Administration Tool (NEAT). In this section, you can

• Add users and groups to the Directory view
• Make printers available to users and groups on your network
• Make applications available to the users and groups on your network

This section provides basic information about adding users and groups to the Directory view so that network resources are easily accessible to users. If your environment requires a customized solution, however, refer to Supervising the Network in the NetWare 4.11 online documentation included in this product.

NOTE: When you installed IntranetWare for Small Business, a QuickStart utility asked you if you wanted to create the groups and users for your company. If you chose not to at that time but you want to add them now, or if you have additional groups and users you want to add, read the following sections.

Users must be added to the Directory tree before they can take advantage of the resources on the network. For example, if a printer is set up on the network and the printer appears in the Directory view, a user cannot print to that printer until the object for that user has been added to the Direct ory tree.

If users in your company will be sharing common resources on the network, you will want to create a group for those users. Then when you add an object such as a printer, you can assign the group rights to print to that printer.

Add or Delete Users

Before network resources can be used by employees in your company, employees must have a user account on the network. Add users to your Directory tree before you add groups.

Prerequisites

• Log in to the network as ADMIN
• Double-click the NEAT icon

Add a User Account

To add a new user, do the following.

Procedure

1. From the New menu, select User or click Add a New User on the toolbar.

   Either option launches the Add a New User wizard.

   Figure 2-1. Add a User

   
   
   

2. Enter the user's full name.

   A default login name is assigned automatically, but can be changed. Be sure to follow the standard naming conventions.

3. (Optional) Assign a home directory to the user.

   A home directory is created by default and a drive mapping to the directory is added to the user's login script. Home directories provide network space for users to store files. If you change the home directory, a new map will be added to the login script automatically.

   1. To accept the default home directory, click Next. Go to Step 4.

   2. To change the default, click the folder icon to browse the file system for the correct directory. Select the directory (click the folder to browse the directory) and click OK. Go to Step 3d.

   3. To create a new home directory, click the folder icon and click Create a new Directory. Enter the new name and click OK . Select the directory and click OK. Go to Step 3d.

   4. Click Next.

4. (Optional) Add this user to one or more groups.

   1. Click Add to browse for available groups.

   2. Select the desired group from those displayed.

      If needed groups have not yet been created, use the Create a New Group button to create them.

      To select multiple groups, press <Ctrl> while clicking on the groups.

   3. Click OK.

5. Click Next.

6. (Optional) Enter a password that this user must enter to log in to the network. Give the password to the user.

   1. If you decide not to require passwords, leave this field blank and instruct the user to leave the password field blank when he or she logs in. See "Edit User or Group Properties" for instructions on changing passwords.

   2. Go to Step 7 or 8.

7. (Optional) Create additional users. If you need to add other user accounts, check the Create another user check box before continuing to Step 8.

   The program returns to the first screen without exiting the wizard.

   Check the box again when you are finished creating users.

8. Click Finish to add this user to the Directory view.

Delete a User Account

Take care in deleting objects that you don't inadvertently remove objects you need, because their associated properties and relationships with other objects are also deleted.

For example, if you delete a User object, that user no longer exists on the network which could mean if other objects rely on this User object, those objects will no longer have the functionality.

To delete a User object, do the following.

Procedure

1. From the Directory view, select the User object.

2. From the Edit menu, select Delete selected item .

3. Click Yes.

Managing Groups

Group accounts simplify the management of users' access to network direct ories, files, printers, and applications. Instead of making assignments to each user, you can create a group, add users with similar network needs to the group, and manage all users' access needs through the group.

Any individual differences can still be managed through a separate user account. The user still has access to both individual and group assignments and the user can belong to as many groups as necessary.

Prerequisites

• Log in to the network as ADMIN.
• Double-click the NEAT icon.

Add a Group

NOTE: Only users who appear in the Directory view can be added to a group. If you need to include a user who does not yet have a network account, add the user with the Add a New User wizard before you add the new group. Alternatively, you can add the group and add the user to the group later. See "Edit User or Group Properties ."

To add a group, do the following.

Procedure

1. From the New menu, click Group; or click Add a New Group on the toolbar.

   Either option launches the Add a New Group wizard.

   Figure 2-2. Add a Group

   
   
   

2. Enter a name that distinguishes this group from other groups on the network. Click Next to continue.

3. Be sure to follow the standard naming conventions. See "Naming Conventions" in the online Help.

4. Click Finish to add this group to the directory.

Add Users to a Group

To add users to a group, do the following.

1. From the Directory view, select a group.

2. From the property view, click the Users tab.

3. Click Add to display users who have network accounts.

   If a user is not listed, select Create a New User and follow the screen prompts to add the user.

4. Select a user to be added. To select multiple users, press <Ctrl> while clicking on the desired users.

5. Click OK.

6. Click Finish to add the user to this group.

Delete Users from a Group

To delete users from a group, do the following.

1. From the Directory view, select a group.

2. Click the Users tab.

3. From the list, select a user. To select multiple users, press <Ctrl > while clicking on the desired users.

4. Click Remove.

5. Click Yes to confirm your action.

Delete a Group

Take care in deleting groups from the Directory view so that you don't inadvertently remove objects you need, because their associated properties and relationships with other objects are also deleted.

For example, if you delete a group, all assignments made to that group are deleted for all users in the group. Users no longer have access to the applications, printers, and directories that they shared as members of the group.

To delete a group, do the following.

Procedure

1. From the Directory view, select the group.

2. From the Edit menu, select Delete selected item .

3. Click Yes to confirm the deletion.

Edit User or Group Propert ies

Whenever a user or group is highlighted, properties related to user or group accounts display in the Property view on the right side of the "Novell Easy Administration Tool" window.

User properties are organized in tabs known as Property views and include these headings: General, Groups, Applications, Security, and Login Script.

Group properties are organized in tabs known as Property views and include these headings: Users, Security, and Applications.

Figure 2-3. Edit Properties

Table 2-1 describes basic administration tasks you can do for users and groups, indicates whether a tab applies to both users and groups, and includes the tab name if there is one. Procedures for the tasks follow the table.

Table 2-1. Basic Administrative User and Group Tasks

Set or Change a User's Login Name

To set or change a user's account information, do the following.

Procedure

1. From the Directory view, select the user.

2. From the Property view, select the General tab.

3. Change the following fields as necessary.

   1. Full name. To change the user's full name, enter the desired name in the full name field.

   2. Login name. To add or change the user's network login name, enter the desired name in the login name field.

      NOTE: Changes to a user's login name are not displayed in the Directory view until you have clicked another tab or object.

Set or Change a User's Password

To set or change a user's password, do the following.

Procedure

1. From the Directory view, select the user.

2. From the Property view, select the Security tab.

3. Click Set Password.

4. Enter the new password in the New Password field.

5. Enter the password again to confirm it.

6. Click OK.

To prevent a user from changing his or her password, uncheck the User Can Change Password box. By default, a user can change his or her password.

NOTE: Users can reset their passwords in several ways, depending on which desktop platform and NetWare client they are using. They do not need access to NEAT to change their passwords.

Set or Change a User's Home Directory

When a user account is created, the home directory is set up by default.

To set or change a user's home directory, do the following.

Procedure

1. From the Directory view, select the user.

2. From the Property view, select the General tab.

3. In the Volume field, indicate in which volume the home directory will reside. Click the folder button to browse for the correct volume in the file system.

4. Click the folder button to locate the correct directory in the file system.

5. (Optional) If the directory you want to use as the user's home directory does not exist, create a new directory by doing the following:

   1. Click the browse button.

   2. Click the directory in which you want the user's home sub directory to be placed.

   3. Click Create a New Directory.

   4. Enter the name of the new directory.

   5. Click OK.

Make Network Files and Directories Available

The Security tab is used to change password information for users and to change file and directory access.

To allow users and groups access to files and directories on the network, do the following.

Procedure

1. From the Directory view, select the user or group.

2. From the Property view, select the Security tab.

3. Click File System Rights.

4. From the list, view the files and directories to see the rights for this user or group.

   The rights Small Business uses are Full, Read, and None.

   1. To change the rights, click Set Rights.

   2. Click Full, Read, or None.

      Full. Users or groups have full access to this file or directory except the Supervisor right.

      Read. Users or groups can only read and scan this file or directory.

      None. Users or groups have no rights to this file or directory. They cannot view the file or directory or view its contents.

      IMPORTANT: User rights cannot be decreased if the user belongs to a group that has the rights you want to eliminate. To decrease the rights, you must go to the group Property view and change the group rights or remove that user from the group.

5. Click Close.

Display or Change File System Rights

To view or change file system rights, do the following.

Procedure

1. From the Directory view, select the user or group.

2. From the Property view, select the Security tab.

3. Click File System Rights.

4. From the list, view the files and directories to see the rights for this user or group.

   The rights Small Business uses are Full, Read, and None.

   1. To change the rights, click Set Rights.

   2. Click Full, Read, or None.

      Full. Users or groups have full access, except the Supervisor right, to this file or directory.

      Read. Users or groups can only read and scan this file or directory.

      None. Users or groups have no rights to this file or directory. They cannot view the file or directory or view its contents.

      IMPORTANT: User rights cannot be decreased if the user belongs to a group that has the rights you want to eliminate. To decrease those rights, you must go to the group Property view and change the group rights or remove that user from the group.

5. Click Close.

Remove File or Directory Access

To remove all access to a directory or file for a user or group, do the following.

Procedure

1. From the Directory view, select the user or group.

2. From the Property view, select the Security tab.

3. Click File System Rights.

4. From the list, view the files and directories to see the rights for this user or group.

   The valid rights are Full, Read, and None.

   1. To change the rights, click Set Rights .

   2. Click None.

      None. Users or groups have no rights to this file or directory. They cannot view the file or directory or its contents.

      IMPORTANT: User rights cannot be decreased if a user belongs to a group that has the rights you want to eliminate. To decrease those rights, you must go to the group Property view and change the group rights or remove that user from the group.

5. Click Close.

Make Printers Available

To make printers available for users and groups on the network, do the following.

Procedure

1. From the Directory view, select the printer.

2. From the Property view, select the Users, Groups tab.

3. Click Add.

4. From the list, select a user or group. To select multiple users or groups, press <Ctrl > while clicking on the desired users or groups.

5. (Optional) Create a new group. Click Create a New Group .

6. Click OK.

Remove Printer Access

To remove a user's or group's access to a printer, do the following.

Procedure

1. From the Directory view, select the printer.

2. From the Property view, select the Users, Groups tab.

3. Click the user or group to remove.

4. Click Remove.

5. Click Yes.

Create or Modify Login Scripts

With login scripts, you can automatically connect users to files, printers , and other network resources needed for their production environment. If several users access the same resources, you can put the script commands in the system login scripts.

NOTE: Some Novell application tools may eliminate the need for a login script. See Table 2-1"Novell Application Tools" for more information.

The Login Script tab contains a user login script that you can modify. (Users can modify it if you give them rights to do so). This script contains a mapping to the SYS:PUBLIC directory and the user's home directory. If you change the home directory, a new map will be added automatically to the login script.

To open a user login script, do the following.

Procedure

1. From the Directory view, select a user.

2. From the Property view, click the Login Script tab.

3. Click the desired access for users.

   1. Click User can only read script. This prevents the user from editing his or her own login script.

   2. Click User can read and modify script. This allows a user to edit his or her own login script.

4. Click Edit Login Script to open the user login script .

   You can also add many other commands to this file to customize the user's login environment.

5. Click OK.

See "Using Login Scripts" for more informa tion.

View or Add an Application

The Applications tab displays applications to which the user currently has access.

To allow access to additional applications, do the following.

Procedure

1. From the Directory view, select the user or group.

2. From the Property view, select the Applications tab.

3. Click Add.

4. From the list, select the desired application.

5. Click an application to add it to the Applications tab. To select multiple applications, press <Ctrl> while clicking on the desired applications.

6. (Optional) If an application does not yet exist in the Applications tab, click on Create a New Application to create the Application object and then add access for the user or group.

7. Click OK.

Remove Access to an Application

To remove access to an application, do the following.

Procedure

1. From the Directory view, select the user or group.

2. From the Property view, select the Applications tab.

3. From the Applications tab, click the application to remove.

4. Click Remove.

5. Click Yes to confirm your action.

---

Task	User	Group	Tab Name
Set or change a user's login name	x		Users, General
Set or change a user's password	x		Security
Set or change a user's home directory	x		General
Make network files and directories available	x	x	Security
Display or change file system rights	x	x	Security
Remove file or directory access	x	x	Security
Make printers available	x	x	Users, Groups
Remove printer access	x	x	Users, Groups
Create or modify a user login script	x		Login Script
Allow access to user login scripts	x		Login Script
Allow a user to view or add an application	x	x	Applications
Remove access to an application	x	x	Applications

Prior

Main Index

Next

---

    This page is maintained by:   Michael P. Harris

---

	viking.delmar.edu Last Updated: Sep 20		mpharris@surf.delmar.edu Copyright © 1998