File permissions are something systems administrators deal with every day. Usually when somebody can’t read something on the server, and they need you to figure out why. In multi-user environments, however, what people can’t read is often as important as what they can, and by default the Mac OS X Finder may allow people to read far more than your users expect.

Apple’s Server Admin tool is the heart of the OS X Server experience, allowing you to do observe and administer servers from any location with a laptop and an internet connection. There are times, though, when you don’t even have that available. If you have an iPhone, you can still check in on the operation of essential systems with Harlekins’ Server Admin Remote.

The sales team need VPN for travel. The finance department needs Windows File Sharing. Freelancers need to deliver work via FTP, but they shouldn’t ever be able to log in from the console. Your server needs to offer a variety of services, but you don’t want to offer every service to every user with an account. Using the access panel built into the Server Admin application, you can set finely grained controls over which users and groups can utilize which services.

While never technically required (though often politically desirable), hiding local administrative accounts on Leopard workstations and laptops is one of the most popular requests we receive from IT personnel. The most common scenario is removing a pre-existing administrative account from view. This is a typical approach when building a disk image for manual cloning or installation via NetInstall, and in this article we’ll take a look at the steps it requires.

Disk mirroring, where data is written to two disks simultaneously, is a great low cost method to protect against single-disk failure and improve read-intensive performance. Apple’s Disk Utility provides an easy way to set two disks up as a RAID mirror prior to installation. Once the operating system has been installed, though, OS X can’t mirror an existing drive without completely reformatting. Unless, of course, you choose to do some from the command line.

Just because solving a problem is easy doesn’t mean it’s an easy problem. The issue of “corrupted” or out-of-spec font files causing operating system or application crashes is a long-standing thorn in the side of Mac users and administrators. That’s because font files are software that interacts directly with the OS, but that software is often judged (and purchased) on aesthetic, rather than technical, grounds. While the problem of bad font software isn’t likely to go away any time soon, it’s at least possible to solve the problem of locating and removing those files.

If you’ve ever had to troubleshoot a Mac OS X machine, you probably know how invaluable the system logs can be. By simply opening the Console application in the Utilities folder, you can browse the information logged by almost any process on the machine. But how can you compare that data over a large number of systems, or look at the logs for a machine that isn’t right in front of you? It’s simply a matter of properly configuring syslogd.

You’re looking for an email invitation you sent months ago, but the option to search through each “Entire Message” in Mail is grayed out entirely. Instead, you search iCal for the appointment itself, only to find the results are empty. Thinking you have the minutes stored somewhere on your hard drive, you try searching in the Finder but discover that even items displayed in open windows can’t be located. Spotlight indexing has broken on your local machine.

In many ways, OS X 10.5.7 is a huge improvement for Leopard users, enhancing Finder network reliability, iCal server interaction, and portable home directory performance. In a managed Open Directory environment, however, it may also have the unfortunate side effect of locking you out of your legacy PowerPC machines.

If you aren’t lucky enough to have corporate servers that run AFP, you’ve probably had just about enough of the .DS_Store files that Mac OS X leaves lying around your Windows SMB and Linux NFS shares. While the files are turned off by default in Leopard, there are enough Tiger and Panther servers around to drive underfunded IT departments mad.