one more

oh yeah, don't forget that

5. if you create a group via the Workgroup Manager, you need to hit a shell to run

sudo CreateGroupFolder

how .. intuitive, and completely unnecessarily capped. damn you crapple, cmd-line apps should not have nor start with capital letters.