Configuring Mountain Lion's Users & Groups
Configuring a Group account
Creating an Administrator’s account works much the same way. The one account (other than Managed with Parental Controls) that requires a bit more explanation is the Group account. This is an account where you allow groups of certain users already registered on your Mac to have access to specific folders.
Let’s say, for example, you’ve set up standard user accounts for your four nephews—Pipeye, Peepeye, Pupeye, and Poopeye. Pipeye and Peepeye are upstanding young men and can be trusted. Pupeye and Poopeye, however, are pipe-smoking rapscallions. Within the Users & Groups preference you, as Administrator, go through the usual motions to create a new account, but this time you choose Group from the New Account pop-up menu.
Name the group
Nephews and then click Create Group. You’ll now see the group name in the Name field and a Membership area below, which contains a list of all the user accounts on your Mac. In that list are Pipeye, Peepeye, Pupeye, and Poopeye’s accounts. Check the box next to Pipeye and Peepeye’s names to add them to your Nephews group.
Now that we’ve created the group, let’s create a folder that just these honorable lads can access.
Within the Documents folder inside your user account, create a new folder and call it
Good Boys. Select that folder and choose File > Get Info (or press Command-I). Click the triangle next to Sharing & Permissions in the resulting window, click the lock icon, and enter your administrator’s username and password. Now click the plus (+) button at the bottom of the Info window and in the sheet that appears select your Nephews group and click Select. You’ve just granted Pipeye and Peepeye access to that folder.
Currently that access is Read Only, meaning that the boys can open any documents in that folder. If you wish to let them place things in that folder as well, click Read Only and select Read & Write from the menu that appears. They can now do pretty much what they like with the contents of that folder. Pupeye and Poopeye, however, can’t touch it because they’re not part of the group with those privileges.
Your account options
There are a couple of additional things you can do within the Users & Groups preference. Exactly what you can do depends on the kind of user you are.
If you’re an Administrator or Standard user, you can configure your account’s login items—applications and processes that start up whenever you log into your account.
Just select your account, click the Login Items tab, and you’ll see any login items currently active for your account. To add another—say you want Mail to always launch when you log into your account—click the plus (+) button and in the sheet that appears, navigate to the Mail application, select it, and click the Add button. To remove a login item, select it and click the minus (–) button.
If you’re an Administrator you can additionally configure the Mac’s login options. To do that, click the lock icon at the bottom of the window, enter an administrator’s username and password, and click Unlock.
You can now configure a number of options related to the login screen. They include:
Automatic login: From this pop-up menu, you can choose to have your Mac automatically log in to a specific account. When you select a user, you’ll be prompted for that user’s password. If your Mac is in a public space, this is not a good option to enable as anyone who fires up your Mac will automatically be logged into this account. In such a situation, be sure that this is set to Off.
Display Login Window As: You’re presented with two options—List of Users, and Name and Password. If you choose the first option (which is on by default) the login screen will show icons and names for all the users configured for the Mac. Just click one, enter that user’s password, and log in. If, instead, you choose Name and Password, you’ll see only blank name and password fields, which you must correctly fill. This latter option is more secure in that you have to know both a viable username and password to log into an account.
Show the Sleep, Restart, and Shut Down Buttons: This too is on by default. If you don’t wish to give users the power to perform these actions from the login screen, switch this option off.
Show Input Menu in Login Window: I covered the Mac’s input source options in The Mac’s Linguistic Tricks should you need a refresher on just what a multilingual marvel your Mac is. The point of this option is to allow others logging into the Mac to choose a different language setup. For example, if you live in a country where multiple languages are commonly spoken, one user may prefer to use the German language while another may wish to use French and yet another, Australian English. With this option enabled, those users will be able to choose their language before the Finder appears.
Show Password Hints: When you first set up an account you’re prompted to enter a hint—something to remind you of what a password might be. If you enter an account’s password incorrectly three times, the password hint will appear.
Show Fast User Switching Menus As: For some time Mac OS X has had a terrific feature called Fast User Switching. The idea is that multiple users can be logged into the computer at one time, but only one account can be active. Rather than having to log out of one account and fire up another, by using Fast User Switching you can simply select another account and switch to it (after entering that account’s password). This setting controls whether Fast User Switching is on or off as well as lets you choose how its menu is configured.
Once the option is enabled, so too is Fast User Switching. You’ll know that it is because, by default, the account’s full name will appear in the right side of the menu bar. From the Fast User Switching pop-up menu you can choose to view that menu not as an account’s full name but by the short name or the account’s icon.
To engage Fast User Switching, just choose another account name from the menu. The Mac’s interface will swivel around, and you’ll be presented with a dialog box where you enter that account’s password to log into it. The account you were working in will go dormant while you play around in the one you’ve switched to.
For more on Fast User Switching, see Rob Griffiths’ Why Every Mac Owner Should Use Fast User Switching.
Use VoiceOver in the Login Window: VoiceOver is Apple’s free screen reader that allows those with visual impairments to use the Mac. As users pass the Mac’s cursor over items, the names of those items are spoken. If someone using the Mac needs this kind of assistance, switch this option on.
You now know the mechanics of the Users & Groups system preference. Here’s a little additional advice: With an Administrator’s account comes a fair heap of responsibility. With such an account it’s possible to accidentally delete files that you (or worse, your Mac) needs. And with an Administrator’s password in hand, someone who’s not entirely sure of what they’re doing can configure important system preferences in confounding ways. If you’re not entirely comfortable with your Mac (and this shoe fits many people reading Mac 101), it’s not a bad idea for you to create an additional account—a Standard account rather than an Administrator’s account—and use it by default. Doing so helps ensure that you don’t futz with things you shouldn’t.
It’s also worth your while to create a troubleshooting account—one that does have Administrator’s privileges—and then leave it alone. We haven’t gotten into troubleshooting yet, but one common technique is to have such an account and when things go blooey in your regular account, switch to the troubleshooting account to see if the same problems occur there. If they don’t, you then know that there’s something amiss in your regular account.
Next week: Parental Controls