In many ways, OS X 10.5.7 is a huge improvement for Leopard users, enhancing Finder network reliability, iCal server interaction, and portable home directory performance. In a managed Open Directory environment, however, it may also have the unfortunate side effect of locking you out of your legacy PowerPC machines.

OS X Server offers an extremely simple system to manage account preferences, at least those user preferences predefined by Apple. Systems administrators, however, typically find themselves needing to control application settings that haven’t been singled out in Workgroup Manager.

Aside from the files an OS X Server shares across your entire enterprise, there’s often the desire within individual workgroups to have private storage areas for their own projects. These group folders are essential for departments like HR and Accounting, but they can also be helpful for less security-conscious groups as a staging area before sharing their final work company-wide. Fortunately, while the process of creating these file shares isn’t obvious, it also isn’t complicated.

Last week, in part one of this series, we took began deploying Portable Home Directories, reviewing their prerequisites and enabling the mobile managed preferences. This week we’ll continue the process, by setting up an AFP share to host our user homes and configuring our Open Directory accounts to take advantage of them.

Available since version 10.4, Portable Home Directories have become one of the most elegant and well-implemented features of a full Mac OS X Server deployment. Functioning much like Windows’ roaming profiles (or earlier Solaris NFS/NIS environments), they allow a user to log in from any computer on your network while retaining their personal data and settings. Unlike entirely network-based systems, however, they do so by synchronizing user data to the server (so that a full copy of the home directory exists in both locations), eliminating the need for constant connectivity.

One of the long-standing complaints from IT departments about Mac OS X is the lack of a granular administration system. Users are either administrators or they aren’t; It’s a simple and appealing set up for home studios, but a serious problem for companies laboring under HIPAA and Sarbanes-Oxley regulation. In our earlier series on how to master Open Directory, we deployed centrally managed network accounts for Macintosh. Administrators who need finer control of the user environment can build on that deployment to manage account preferences.