Multiple Users Guide Setting up your computer for multiple users You can set up your computer to be used by multiple users by creating a unique environment for each user. You (the computer's owner) can control which applications and locations each user can access. You can create up to 40 different user accounts and one guest user account. You can also assign another user the privilege to create and manage user accounts. To create and manage user accounts on your computer, use the Multiple Users control panel. Note: Before using the Multiple Users control panel, you must make sure you've entered an owner name and password in the File Sharing control panel. For more information, see the following topics below:    Creating user accounts    Logging in and out    Restricting access to certain applications    Setting privileges for Limited and Panels users    Managing global user options Creating user accounts To create and edit user accounts on your computer, use the Multiple Users control panel. You can assign users one of three different user environments. To create a new user account: Click New User. Enter the user name and password (optional). Select the kind of user: Normal, Limited, or Panels. Click Show Setup Details. Set up the login dialog box for each user by selecting an existing picture or dragging a picture from a Web browser. Make other settings. User can change password: Allows the user to change the password you set and to set or change their voiceprint password. Can Log In: If this is not checked, the user account is temporarily disabled. Can Manage User Account: This user (account manager) can create, delete, or modify other accounts (except for the owner's). Click the close box to save your settings. To create multiple users with the same settings: Select a user whose settings you want to duplicate and click Duplicate. To edit a user account: Double-click the user name or select the user name and click Open and make the changes you want. To set up a guest account: Click Options, then click the Other tab and select the "Allow a Guest User Account" check box.   Users and environments The Multiple Users feature of your operating system offers three different user environments and a full system access environment (accessible only to the owner of the computer). In all the user environments, when a user attempts to open or save a document, the computer automatically points the user to the user's documents folder, and in some restricted cases, the user cannot move away from that location. Panels The Panels interface is simple and easy to use. The user has limited access to the computer's hard disk. The user's approved items appear on one panel and the user's documents on another. The environment features large one-click buttons. You can customize the interface to allow large or small icons, and to display the open panels side by side or overlapping, with tabs at the top or the bottom. Limited user The Limited user environment allows users access only to some parts of the Finder. Usually, users can save items only in their own folders and can only open approved applications. Normal user A normal user can access the Finder and all applications on the startup disk but usually cannot see the contents of another user's documents folder. A normal user with privileges to manage user accounts (account manager) can create, delete or modify user accounts with the exception of the owner's account. Owner When you log in as the owner, you gain access into the full system access environment. Only in this environment, can you install applications, set up printers, access other users' documents, or turn Multiple Users access on or off.   Logging in and out When you start up your computer, you may see a login dialog box. Depending on the login selections made by your account manager or owner, you log in to your computer by selecting or entering your name and password or simply by speaking your name and password. Note: If you are the owner or the only user of your computer, you may not see the dialog box when the computer starts up. However, you can choose to have the login dialog box appear, to prevent any other user from logging in to your system. To log in: Select your name from the list, or enter your name. Click "Log in." Enter your password or speak your password. To change your password: Click Change Password. Type your new and old password. Click "Reset alternate password" to change your voiceprint password (if voiceprint is enabled). Note: If the Change Password button is not available, your account manager may have made this feature unavailable to you. To log in using your voice password: Select, enter, or speak your name. After a moment, you are prompted to speak your voice password. Speak your voice password. You are allowed up to three tries with your voice password. If this fails you can type your password. To log out of your computer, do one of the following: Open the Special menu and choose Logout. Press Command-Q. To turn Multiple Users on or off: Open the Multiple Users control panel. Click the On or Off button. (Only the owner can turn Multiple Users on or off.) Note: If you (the owner) are the only user of your computer, you can prevent other users from logging in to your computer by turning Multiple Users on.   Creating a voiceprint password You can create your own voiceprint password, or the owner or account manager can assist you in creating a voiceprint password. To create a voiceprint password: Open the Multiple Users control panel. Double-click the user name or select the name and click Open. Click Show Setup Details and click the Alternate Password tab. Ensure that the following checkbox is selected: "This user will use the alternate password." IMPORTANT: If you do not have access privileges to open the Multiple Users control panel, you can create your voiceprint by clicking Change Password in the Login dialog box and selecting "Reset alternate password." Then follow the steps below. Click the Create Voiceprint button. You can use the phrase provided to you or you can record your own phrase by clicking the Change Phrase button. Click Continue. Click the Record First button. Click Record then begin speaking. To ensure correct recording, speak consistently. Use an even tone and do not whisper or speak too loudly. After each recording, click the Record/Stop button followed by the Done button. After the fourth recording, click the button labeled "Try it" to authenticate your new voiceprint. Note: If your computer does not have a built-in microphone, use an Apple PlainTalk microphone.   Troubleshooting If the Alternate Password tab in the user account window is unavailable: In the Multiple Users control panel, click Options, then click the Login tab and make sure the Allow Alternate Password checkbox is selected. Restricting access to certain applications The owner or account manager can restrict the applications to which a Limited or a Panels user has access. To set user access to certain applications: Open the Multiple Users control panel. Double-click the name of a Limited or Panels user. Click Show Setup Details and select the Applications tab. In the User Applications list, select the checkbox next to each application the user will use. Tip: After you have selected the applications, you can use the Show pop-up menu to view just those items to which the user has access. To add a file that is not an application, such as a template for a document or a control panel, to the list of applications, click Add Other. To allow access to most applications and restrict only a few, use the Select All button. If you have selected "All but AppleScripts" in the Show pop-up menu and click the Select All button, the list of applications will not include any AppleScripts. Use the Select None button to set the list of applications back to the default. Note: To restrict or enable access to "sub-applications" (applications that are part of a larger set of applications), select the sub-application and not just the main application. For example, to give access to Microsoft Word, make sure you select MS Word in the list, not just Microsoft Office. Troubleshooting If you aren't notified when new applications are installed: Click Options, then click the Other tab and make sure that the "Notify when new applications have been installed" checkbox is selected. Log in as the Owner before you install new applications. If any other user has installed a new application, you (the owner) will be notified only when you log out. This will ensure that only you can allow other users access to any new application. If Limited and Panels users see error messages the first time they use certain applications: You (the owner) must open all the applications in the system access environment at least one time before the applications are opened by the Limited and Panels users. If applications fail to work in the Limited or Panels environment: You (the owner) need to give the users who need to use these applications normal user privileges to access the hard disk. If aliases of applications deleted from the hard disk remain in the User Applications list: To remove aliases of deleted applications, click Select None in the Applications tab, choose All Applications from the Show pop-up menu and then click the Select All button. If Limited users open applications to which you have not given them access: Limited users can use the Script Editor (an application program for creating AppleScript scripts) to open applications to which they do not have access. To avoid this, you must deny the user access to the Script Editor.   Setting privileges for Limited and Panels users You can set certain privileges for Limited and Panels users in the Privileges tab of the user account window in the Multiple Users control panel. To set privileges for these users: Select a user account. Click Privileges. The privileges you can change are these: CD/DVD-ROMs: Allows users access to all or some CD and DVD-ROM discs. To restrict the user to only certain discs or specific content on selected discs, select the box labeled "List for Restricted Users" and also make your choices in the Other Global settings. If you allow users access to any CD or DVD disc, but you restrict user access to certain content in these discs in the Other Global settings, the users will have access only to specific content in all the discs. Removable Media: Allows users access to floppy disks and other storage media (except CD/DVD-ROM discs). Shared Folder: Allows users access to the global shared folder on your computer. Chooser and Network Browser: Allows users access to the Chooser to create printers and log in to shared disks and allows access to a Network Browser. (Allowing access to the Chooser does not automatically allow printing.) Control Panels: Allows users access to the Control Panels folder and all items within it. Other Apple Menu Items: Allows users access to items in the Apple Menu other than Chooser, Control Panels, Recent Items, and the About command. User Can Print: Allows users to print to the printer specified in the "Allowed Printer" pop-up menu. Troubleshooting If Limited users can't do certain tasks included in Mac Help: Mac Help includes some tasks such as changing the desktop appearance, that require the use of control panels and applications on the hard disk. If users can't complete these tasks,you may not have given the users access to the necessary items. If CDs to which users don't have access play before being ejected: Turn off the CD Autoplay feature in the QuickTime Settings control panel.   Managing global user options You can manage settings that affect all users of your computer using the Multiple Users control panel. To manage global user settings: Click the Options button. Login settings Welcome Message: You can set up a welcome message to appear each time a user logs in. Log-in Settings: You can allow or prevent users from using an alternative to a typed password, such as a voiceprint password. You can have users speak their names (if Speakable Items software is installed and enabled in the Speech control panel of your computer) instead of typing or selecting their names. Note: If the voice recognition software is not installed, you can install it by using the Mac OS Installer. You can set login timeout options, specifying whether the user should be logged out or the screen locked. CD/DVD-ROM Access settings You can allow users access to only certain CD and DVD-ROM discs and only to specific content in them. The "List for restricted users" displays the titles of CD/DVD-ROMs that can be accessed by Limited or Panels users. You can add or remove discs to this list. The "Restrict content to" list displays the main contents (root directory level) of the CD/DVD-ROM selected in the "List for restricted users." Note: If you restrict user access to only certain content in the discs, while allowing user access to any disc (as selected in the Privileges tab of the user window) the users will still have access only to specific content in all the discs. Other settings You can allow or prevent guest access to your system. The privileges you set up for the guest account apply to all who log in as guest. You can be notified (through an alert message) when a new application is installed and allow or prevent users from accessing it. You can have users choose their names from a list or enter their names when they log in. You can specify which kinds of user accounts can log in to your computer: Click "Multiple User Accounts (local)" if accounts are located on your computer. To allow access only to accounts created in Macintosh Manager, Click "Macintosh Manager Accounts (on network)." Note: The "Macintosh Manager Accounts (on network)" option is available only if the Macintosh Manager software is available in the language you're using on your computer. Troubleshooting If you've turned on the idle timeout option but users are'nt logged out (or their screens locked): Make sure the user has a password. If a user does not have a password, he or she will not be logged out or the screen locked after an idle timeout. To avoid security risks, it is recommended that all users have passwords. Copyright ©2000 Apple Computer, Inc. All rights reserved. Apple, the Apple logo, Multiple Users, and Mac are trademarks of Apple Computer , Inc., registered in the U.S and other countries. Finder is a trademark of Apple Computer, Inc.