I can't think of any ingenious ways to do this via networked users,
but a workaround that comes to mind is using Apple Remote Desktop to
create two local admin accounts on all your machines. You can even
periodically change their passwords with ARD.
On Mar 9, 2007, at 8:36 AM, Tina Siegenthaler wrote:
We are two people at our IT department. Both of us need
administrator rights on our (managed) clients, but we are not
supposed to use the same single local admin account for the both of
us (it should be possible to track down who was actually logged in
at a certain time). This means we need *two* admin accounts on each
client. Instead of creating those two admins locally on each
client, we'd like to create two admins on the OD server, which we
can use to administer all the clients that are bound to this OD
server.This would also make it MUCH easier to change the password
from time to time... just changing it on the OD instead of changing
on 100 or more clients...
I know I can check the box "allow user to administer the server"
but I understand this means what it says, admin rights on
the*server*, not on the client(s) - am I wrong??