MacBook For Dummies phần 8 potx

To edit an existing account, log in with your admin account, display theSystem Preferences window, and click Accounts to display the account list.Then, follow these steps: 1.. For exampl

3 In the Name text box, type the name that you want to display for this account Press Tab to move to the next field.

Tiger displays this name on the Login screen, so behave!

4 Tiger automatically generates the user’s short name (for use in iChat,

and for naming the user’s Home folder), but you can type a new one if you want (No spaces, please.) Then press Tab.

5 In the Password text box, type the password for the new account.

Press Tab to move to the next field.

Run out of password ideas? No problem! Click the key button to displaythe new Password Assistant, from which Tiger can automatically gener-ate password suggestions of the length you specify After you generatethe password you want, press Ô+C to copy the password, click in thePassword text box on the new user sheet, and then press Ô+V to paste it

6 In the Verify text box, retype the password you chose Press Tab again

to continue your quest.

7 Tiger can provide a password hint after three unsuccessful login attempts To offer a hint, type a short question in the Password Hint text box.

From a security standpoint, password hints are taboo (I never use ’em

If someone is having a problem logging in to a computer I administer,

you better believe I want to know why.) Therefore, I strongly recommend that you skip this field — and if you do offer a hint, keep it vague! Avoid

hints like, “Your password is the name of the Wookie in Star Wars.” Geez

Figure 16-2:

Fill out thosefields, andyou have anew user

8 Decide the account level status.

If you want the standard level account, do not select the Allow User toAdminister This Computer check box If you want the administratorlevel, select the check box

You should have only one or two admin accounts, and your account isalready an admin account

9 Click the Create Account button.

You’ll note that the new account shows up in the list at the left of theAccounts pane

Each user’s Home folder has the same default subfolders, including Movies,Music, Pictures, Sites, and such A user can create new subfolders within his

or her Home folder at any time

Here’s one more neat fact about a user’s Home folder: No matter what theaccount level, most of the contents of a Home folder can’t be viewed by otherusers (Yes, that includes admin-level users This way, everyone using yourlaptop gets his or her own little area of privacy.) Within the Home folder, onlythe Sites and Public folders can be accessed by other users — and only in alimited fashion More on these folders later in this chapter

Tweaking existing user accounts

Next, you consider the basic modifications you can make to a user account,such as changing existing information or selecting a new picture to representthat user’s unique personality

To edit an existing account, log in with your admin account, display theSystem Preferences window, and click Accounts to display the account list.Then, follow these steps:

1 Click the account that you want to change.

Don’t forget to unlock the Accounts pane if necessary See the earliersection, “Adding a new user account,” to read how

2 Edit the settings you want to change.

For example, you can reset the user’s password or (if absolutely sary) upgrade the account to Admin level

neces-3 Click the Picture tab, and then click a thumbnail image to represent this user (as shown in Figure 16-3).

An easy way to get an image is to use one from your hard drive:

a Click the Edit button and drag a new image from a Finder window into the Images well (the sunken-looking square).

Alternatively, you can click the Snapshot button (which bears atiny camera) to grab a picture from your iSight video camera.

b Click Set to return to the Accounts pane.

Tiger displays this image in the Login list next to the account name

4 When everything is correct, press Ô+Q to close the System Preferences dialog box.

Standard-level users have some control over their accounts — they’re not

helpless, y’know Standard users can log in, open System Preferences, and

click Accounts to change the account password or picture, as well as thecard marked as theirs in the Address Book All standard users can also set uplogin items, which I cover later in this chapter Note, however, that managedusers might not have access to System Preferences, so they can’t makechanges

Deleting accounts

Not all user accounts last forever Students graduate, co-workers quit, kidsmove out of the house (at last!), and Bob might even find a significant otherwho has a faster cable modem We can only hope

Figure 16-3:

Sometimesit’s achallenge tochoose theimage thatbestrepresents

a user

Anyway, no matter what the reason, you can delete a user account at anytime Log in with your admin account, display the Accounts pane in SystemPreferences, and then follow these steps to eradicate an account:

1 Click the account that you want to delete.

2 Click the Delete User button (which bears the Minus Sign of Doom).

Tiger displays a confirmation sheet, as shown in Figure 16-4 By default,the contents of the user’s Home folder are saved in a file in the DeletedUsers folder when you click OK (This safety is a good idea if the usermight return in the future, allowing you to retrieve his or her old stuff —however, this option is available only if you have enough space on yourhard drive to create the Home folder file.)

3 To clean up completely, click the Delete Immediately button.

Tiger wipes everything connected with the user account off your harddrive

4 Press Ô+Q to close the System Preferences dialog box.

Time once again for a Mark’s Maxim:

Always delete unnecessary user accounts Otherwise, you’re leaving holes in

your Mac’s security

Assigning login items and parental controls

Every account on your laptop can be customized Understandably, some tings are accessible only to admin-level accounts, and others can be adjusted

set-by standard-level accounts In this section, I introduce you to the things thatcan be enabled (or disabled) within a user account

Figure 16-4:

This is yourlast chance

to save thestuff from adeleted useraccount

Automating with login items

Login items are applications or documents that can be set to launch or load

automatically as soon as a specific user logs in — for example, Apple Mail or

Address Book In fact, a user must be logged in to add or remove login items.

Even an admin-level account can’t change the login items for another user

A user must have access to the Accounts pane in the System Preferenceswindow to use login items As you can read in the following section, a usercan be locked out of System Preferences, which makes it impossible for login items to be specified for that account (Go figure.)

To set login items for your account, follow these steps:

1 Click the System Preferences icon on the dock, and then click the Accounts icon.

2 Click the Login Items tab to display the settings shown in Figure 16-5.

3 Click the Add button (with the plus sign) to display a file selection sheet.

4 Navigate to the application you want to launch each time you login, click it to select it, and then click Add.

If you’re in the mood to drag-and-drop, just drag the applications youwant to add from a Finder window and drop them directly into the list

5 Press Ô+Q to quit System Preferences and save your changes.

Figure 16-5:

Add apps toyour loginitems list

Login items are launched in the order they appear in the list, so feel free todrag the items into any order you like.

Managing access settings for an account

A standard-level account with restrictions is a managed account (You canread about these earlier in this chapter.) With these accounts, you canrestrict access to many different places in Tiger and your Mac’s applications

using parental controls (Naturally, admin-level accounts don’t need parental

controls because an admin account has no restrictions.)

In short, parental controls come in handy in preventing users — family bers, students, co-workers, friends, or the public at large — from damagingyour computer, your software, or Tiger itself If an account has beenrestricted with parental controls, the account description changes fromStandard to Managed in the Accounts list

mem-To display the parental controls for a standard account, log in with an level account, open System Preferences, and click Accounts Click theStandard account in the list and then click the Parental Controls tab to dis-play the categories you see in Figure 16-6:

admin- Mail: From this category, you can specify “good” (read that “trusted”

and “nice”) e-mail addresses with which this user can exchange mail

 Finder & System: Choose this category to specify what operating

system features the user can access (including the System Preferenceswindow itself) You can also switch an account to use Simple Finder,which I explain in a moment

If you’re adding an account that will be shared among many people, Iespecially recommend disabling the Change Password check box.Disable this option, and your generic student or public access accountkeeps the same password no matter who uses it

 iChat: Select this category to specify the admin-approved instant

mes-saging accounts with which this user can chat

 Safari: Selecting this check box simply turns on site access controls in

Safari (To actually specify “good” sites that the user can visit, you have

to log in as the user and launch Safari.)

To restrict one or more features or functions in a category, mark the sponding check box to enable it, and then click the Configure button to selectthe restrictions (Mail displays the Configure sheet automatically There’salways gotta be an exception.)

corre-For the ultimate in restrictive Tiger environments — think public access orkiosk mode — you can assign the Simple Finder to an account, as shown inFigure 16-7 Even the dock itself is restricted, sporting only the Finder icon,the trash, Dashboard, and folders that allow the user to access his or herdocuments and applications

Figure 16-7:

The SimpleFinder isprettydoggonesimple

Figure 16-6:

You don’thave to be aparent toassignParentalControls!

Mundane Chores for the Multiuser Laptop

After you’re hip on user accounts and the changes you can make to them,turn to a number of topics that affect all users of your laptop — things such

as how they’ll log in, how a user can share information with everyone else onthe computer, and how each user account can be protected from unscrupu-lous outsiders with state-of-the-art encryption (Suddenly you’re James Bond!

I told you Tiger would open new doors for you.)

Logging on and off in Tiger For Dummies

Hey, how about the login screen itself? How do your users identify

them-selves? Time for another of my “Shortest books in the For Dummies series”

special editions (The title’s practically longer than the entire book.)

Tiger offers four methods of logging folks into your multiuser Mac laptop:

 The username and password login: This is the most secure type of

login screen you’ll see in Tiger because you have to type your accountusername and your password (A typical hacker isn’t going to know allthe usernames on your Mac.) Press Return or click the Log In button tocomplete the process

When you enter your username and password, you see bullets instead ofyour password to ensure security Otherwise, someone could simplylook over your shoulder and see your password

 The list login: This login screen offers a good middle of the road

between security and convenience Click your account username in thelist and type your password when the login screen displays the pass-word prompt Press Return or click the Log In button to continue

 Fast User Switching: This feature allows another user to sit down and

log in while the previous user’s applications are still running in the ground This is perfect for a fast e-mail check or a scan of your eBay bidswithout forcing someone else completely off the laptop When you turn

back-on Fast User Switching, Tiger displays the currently active user’s name

on the right side of the Finder menu bar (see Figure 16-8)

To switch to another account:

a Click the current user’s name in the Finder menu.

b Click the name of the user who wants to log in.

Tiger displays the login window, just as if the Mac had beenrebooted

The previous user’s stuff is still running, so you definitely shouldn’treboot or shut down the laptop!

To switch back to the previous user:

a Click the user name again in the Finder menu.

b Click the previous user’s name.

For security, Tiger prompts you for that account’s login password

 Auto login: This is the most convenient method of logging in but offers

no security whatsoever Tiger automatically logs in to the specifiedaccount when you start or reboot your Mac

I strongly recommend that you use auto login only if

• Your laptop is in a secure location (complete with a cable lock, ascovered in Chapter 1)

• You are the only one using your Mac

• You’re setting up a public-access laptop, in which case you wantyour Mac to immediately log in with the public account

Never set an admin-level account as the auto login account This is the

very definition of ASDI, or A Supremely Dumb Idea Nothing quite like a

stolen laptop with no security, I always say!

Figure 16-8:

The FastUserSwitchingmenu,unfurled forall to see

To set up a username/password or list login, open System Preferences, clickthe Accounts icon, and then display the Login Options settings (see Figure16-9) Select the List of Users radio button for a list login screen, or select theName and Password radio button to require your users to type their full user-name and password.

To enable Fast User Switching, select the Enable Fast User Switchingcheck box

To set Auto Login, select the Automatically Log in As check box Click theaccount name pop-up menu and choose the account that Tiger should use(as shown by the now-legendary Figure 16-9)

Logging out of Tiger all the way (without Fast User Switching) is a cinch Justclick the Apple menu (Ú) and then choose Log Out (Or from the keyboard,press Ô+Shift+Q.) A confirmation dialog box appears that will automaticallylog you off in two minutes, but don’t forget that if someone walks up andclicks Cancel, he or she will be using your laptop with your account! YourMac returns to the login screen, ready for its next victim Heed this Mark’sMaxim:

Figure 16-9:

Configureyour loginsettingsfrom theLoginOptionspane

Always click the Log Out button on the Logout Confirmation dialog box

before you leave your Mac

A word about what you can (and can’t) share

You might wonder where shared documents and files reside on your Mac

That’s a good question Like just about everything in Tiger, there’s a simple

answer The Users folder on your laptop contains a Shared folder To share a

file or folder, it must be placed in the Shared folder for standard- and level users to be able to open it

managed-You don’t have to turn on Personal File Sharing in the Sharing pane of SystemPreferences to use Shared folders on your Mac Personal File Sharing affectsonly network access to your machine by users of other computers

Admin-level accounts have the advantage because they can access virtuallyany location on the Mac’s hard drive Therefore, if one admin-level user wants

to save a document for another admin-level user, that document can reside inother folders on your system besides just the Shared folder (Personally, Idon’t mind using the Shared folder because it guarantees that other userscan access it, but privacy between admin users is a closely guarded perk.)

Each user account on your laptop also has a Public folder in that user’s Home

folder This is a read-only folder that other users of your Mac can access:

They can only open and copy the files it contains (Sorry, no changes to ing documents from other users, or new documents from other users.) Every

exist-user’s Public folder contains a Drop Box folder, where other users can copy

or save files (but can’t view the contents) Think of the Drop Box as a mailboxwhere you drop off stuff for the other user

Protecting your stuff with encryption

Allowing others to use your laptop always incurs a risk — especially if youstore sensitive information and documents on your computer Although yourlogin password should ensure that your Home folder is off-limits to everyoneelse, consider an extra level of security to prevent even a dedicated hackerfrom accessing your stuff

To this end, Tiger includes FileVault, which automatically encrypts the

con-tents of your Home folder Without the proper key (in this case, either yourlogin password or your admin’s master password), the data contained inyour Home folder is impossible for just about anyone to read (I guess the FBI or NSA would be able to decrypt it, but they’re not likely a worry at yourplace!)

The nice thing about FileVault is that it’s transparent to you and your users

In other words, when you log in, Tiger automatically takes care of decryptingand encrypting the stuff in your Home folder for you You literally won’t know

that FileVault is working for you — which is how computers are supposed to

work

To turn on FileVault protection for a specific account, follow these steps:

1 Click the System Preferences icon on the dock, and then click the Security icon.

2 If necessary, click Set Master Password to create a master password.

Note that you need to be logged in with an admin-level account to set amaster password However, you need to do this only once, no matterhow many accounts you’re hosting on your Mac Using this master pass-word, any Admin-level user can unlock any Home folder for any user.Before you move to Step 3, note that you must be logged in using theaccount that requires the FileVault protection Therefore, if you had tolog in using your admin-level account to set a master password, youhave to log out and log in again using the account you want to protect.Arrgh

3 Click the Turn on FileVault button.

4 Enter your account’s login password when prompted (see Figure 16-10), and click OK.

5 Click the Turn on FileVault button on the confirmation screen.

6 After Tiger encrypts your Home folder and logs you out, log in again normally.

You’re done!

Remember those passwords Again, do not forget your account login

pass-word, and make doggone sure that your admin user never forgets the masterpassword! If you forget these passwords, you can’t read anything in yourHome folder, and even the smartest Apple support technician can do nothing

to help

Figure 16-10:

YouraccountpasswordbecomesyourFileVaultpassword

Chapter 17

Working Well with Networks

In This Chapter

Choosing between wired and wireless networks

Sharing an Internet connection

Collecting the bits and pieces for a wireless connection

Gathering the stuff you need for a wired connection

Making the network connection

Protecting your Mac with a firewall

In my book (get it — my book), network access ranks right up there with

air conditioning and the microwave oven Like other “taken for granted,but I can’t imagine life without them” kinds of technologies, it’s hard to imag-ine sharing data from your laptop with others around you without a network

Sure, I’ve used a sneakernet (the old-fashioned term for running back and

forth between computers with a floppy disk to copy files), but these days,

Apple computers don’t even have floppy drives (And no self-respecting

com-puter should still have one.)

Nope, networking is here to stay Whether you use it to share an Internet nection, challenge your friends to a relaxing game of WWII battlefield action,

con-or stream your MP3 collection to other computers using iTunes, you’llwonder how you ever got along without one In this chapter, I fill you in on allthe details you need to know to get your new MacBook or MacBook Prohooked up to a new (or an existing) network

If you have just your Mac and an Internet connection (either through a dialupmodem or a high-speed DSL/cable modem) and you have no plans to addanother computer or a network printer, a network isn’t necessary

Should You Go Wired or Wireless?

If you decide that you indeed need a network for your home or office, you

have another decision to make: Should you install a wired network (which involves running cables between your computers) or a wireless network

(which doesn’t require any computer-connecting cables)?

Your first instinct is probably to choose a wireless network for convenience.After all, this option allows you to eliminate running cables behind furniture(or in the ceiling of your office building) Ah, but I must show you the advan-

What exactly is the network advantage?

If you have other family members with ers or if your laptop is in an office with othercomputers, here’s just a sample of what you can

comput-do with a network connection:

 Share an Internet connection: This is the

major reason why many families and mostsmall businesses install a network

Everyone can simultaneously use the sameDSL or cable Internet connection on everycomputer on the network

 Copy and move files of all sizes: Need to

get a 4GB iDVD project from one Mac toanother? With a network connection, youcan accomplish this task in just minutes

Otherwise, you’d have to burn that file to aDVD-R or use an external hard drive A net-work connection makes copying as simple

as dragging the project folder from oneFinder window to another

 Share documents across your network:

Talk about a wonderful collaboration tool

For example, you can drop a Word ment or Keynote presentation file in yourPublic folder and ask for comments andedits from others in your office

docu- Stream music: With iTunes, you can share

your MP3 collection on your laptop withother Macs and PCs on your network Yourears can’t tell the difference!

 Play multiplayer games: Invite your friends

over and tell ’em that you’re hosting a LANparty, the techno-nerd term for a large gath-ering of game players, connected throughthe same network, all playing the same multi-player game (Suddenly you’ll see firsthandjust how devious a human opponent canbe.) Each participant needs to buy a copy ofthe same game, naturally, but the fun you’llhave is worth every cent you spend Don’tforget the chips!

If your laptop isn’t within shouting distance of

an existing network and you don’t plan onbuying any more computers, a network isn’t foryou Because the whole idea of a network is toshare documents and applications with others,

a lone Mac hanging out in your home with noother computers around won’t need a network

tages to a wired network as well Table 17-1 gives the lowdown to help youmake up your mind.

Table 17-1 Network Decision-Making

Compatibility Confusing standards Easier to understand

Now for the biggest decision of all: Should you choose a wired network, awireless network, or a combination of both? Here are the advantages of eachtype of network:

 Wired: A wired network offers two significant perks over a wireless

network:

• Faster speeds: Wired networks that are compatible with your Mac

are up to twice as fast as the fastest 802.11g wireless connections

The performance of a wireless connection is reduced by both ference (from structures such as concrete walls and householdappliances such as some wireless phones and microwave ovens)and distance

inter-• Better security: A wired network doesn’t broadcast a signal that can

be picked up outside your home or office, so it’s more secure

Hackers can attack through your Internet connection Hence the

“Use Your Firewall!” section, later in this chapter

 Wireless: A wireless connection has only one advantage, but it’s a big

one: convenience.

Accessing your network anywhere in your home or office — withoutcables — is so easy Plus, you can easily connect to all sorts of wirelessdevices, such as a wireless printer (By using an AirPort Express mobileBase Station, even your home stereo can get connected to your MP3 col-lection on your laptop.)

Be a Pal — Share Your Broadband!

Time to see what’s necessary to share an Internet connection — in this tion, I cover two methods of connecting your network to the Internet Andbefore you open your wallet, keep in mind that you may be able to use yourMac to share your broadband connection across your home network that

sec-is, when you’re not doing the road warrior thing!

Using your laptop as a sharing device

You can use your Mac laptop to provide a shared wireless Internet tion across your network, using either

connec- A broadband DSL or cable connection

 A dialup modem

You should try sharing a dialup modem Internet connection only if youhave no other option A dialup modem connection can’t handle the datatransfer speeds for more than one computer to access the Internet com-fortably at one time And today’s Mac laptops no longer come with inter-nal modems Sharing a dialup connection just isn’t practical

Your laptop uses OS X Tiger’s built-in Internet connection sharing feature

to do the job, but naturally your Mac must remain turned on to allow net sharing I show you how to do this in the upcoming section “Internet connection.”

Inter-It’s easy to graft wireless access

to a wired network

Are you caught in the middle between wired andwireless networking? Or perhaps you’re alreadyusing a wired network but would be absolutelythrilled by the idea of sitting on your deck in thesunshine whilst checking your e-mail on yourlaptop By using both technologies, you can getthe faster transfers of a wired network betweenall the computers in your office

That is the configuration I use in my home office

My family gets all the convenience a wirelessnetwork offers, and everyone can connect tothe Internet from anywhere in our house On theother hand, my office computers have the fasterperformance and tighter security of a wired net-work Sassy indeed!

Using a separate Internet sharing device

If you decide to use a dedicated Internet sharing device (often called an

Internet router) to connect to your cable or DSL modem, you’ll have to buy

the additional hardware But your laptop doesn’t have to remain turned onjust so everyone can get on the Internet

Internet routers can include either wired or wireless network connections —many include both

Setting up an Internet router is a simple matter The configuration usuallyinvolves a number of different settings in System Preferences that varyaccording to the model of router you’re installing Grab a Diet Coke, sit downwith the router’s manual, and follow the installation instructions you’ll findthere

Most Internet routers offer a DHCP server, which automatically assigns IP

addresses, and I strongly recommend that you turn on this feature! (You

dis-cover more about DHCP later in the chapter, in the sidebar titled “The little

abbreviation that definitely could.”)

What Do I Need for a Wireless Connection?

Most normal folks — whom I define as those who have never met a network

system administrator, and couldn’t care less — think that connecting to a work probably involves all sorts of arcane chants and a mystical symbol ortwo In this section, I provide you with the shopping list that you need to set

net-up a network or connect to a network that’s already running

If your laptop came with built-in AirPort Extreme wireless support (as all rent models do) and you already have an AirPort Extreme or Express basestation, you’re set to go Otherwise, hold on tight as I lead you through thehardware requirements for wireless networking

cur-The maximum signal range of any wireless network can be reduced by vening walls or by electrical devices such as microwave ovens and wirelessphones that can generate interference