Administrator's Guide - Kerio Software Archive

Chapter 13User accountsUser accounts in Kerio MailServer represent physical email boxes. Users access mailboxesthrough user name and password authentication. Since Kerio MailServer can serve severalindependent domains, the user accounts are not valid globally but are only valid for a particulardomain. This implies that domains must be defined before user accounts are created (fordetails, see chapter 7).User accounts can be located as follows:1. locally — user mailboxes are located in Kerio MailServer and any management of useraccounts is performed in Kerio MailServer (see chapter 13.2),2. in the LDAP database — accounts are just mapped to Kerio MailServer. Mapping of useraccounts is available from the Active Directory and/or from the Apple Open Directory(refer to chapter 7.6).User accounts can be simply imported to Kerio MailServer from another user database, asfollows:• import from the Novell eDirectory (more information in chapter 13.10),• import from the NT domain (see chapter 13.10),• import from the Active Directory domain (refer to chapter 13.10),• imported from a text file.13.1 Administrator accountApart from mailbox access, a user account can also be used for access to Kerio MailServeradministration, provided that the user has such rights. The basic administrator account iscreated during the installation process. It has the same properties as other user accounts andcan be deleted by any user with read/write access rights.The default administration account can create and manage public folders.The default administrator account also manages archive folders (if archiving is enabled —see chapter 18.2). Any message which passed through Kerio MailServer can be found in thearchive.Administrator can make archive folders shared with other users. However, since messagesof all users are archived, only a confidential administrator (or a tiny group of confidentialpersons) should be allowed to access these folders.104