Network User + Home Folder + Workgroup Folder + Binding
1. Server.app >> File Sharing >> On >> + to create a shared WorkGroup folder (can be on any drive) >> then edit >> Make Available for home directories over AFP. Also create a UserData folder >> + to create a folder (UserData) >> then edit >> Make Available for home directories over AFP.
2. WorkGroup Manager >> User Tab >> New User (Shift - Command - N) >> Name and password >> Groups >> Add User to Desired Groups if Already Created - or come back and add them later or add via Group Members in next step >> Home Tab >> Select Home URL (UserData) >> Create Home Now (button) >> Save
3. WorkGroup Manager >> Group Tab >> New Group (Shift - Command - N) >> Name >> Members (add as desired) >> Group Folder Tab >> Choose Company Name and assign an owner - this can be the local admin on the server or any user and is required, but doesn't really come into play
4. Terminal >> sudo CreateGroupFolder >> this creates all your Group Folders and only needs to be run after all Groups have been defined
5. WorkGroup Manager >> Group Tab >> Preferences >> Dock >> Always >> Documents and Folders: CHECK Add group folder >> Apply Now
6. WorkGroup Manager >> Group Tab >> Preferences >> Login >> Items >> Always >> Add group share point >> select the new item that was created and ensure "Authenticate selected share point with user's login name and password" is CHECKED.
7. Set Permissions on Group Folder >> Server.app >> Hardware >> server name >> Storage Tab >> Company Name / WorkGroup Folder >> Gear >> Edit Permissions >> Add + >> Workgroup Name >> Permission = Full Control or Read/Write >> OK and then Gear >> Propagate Permissions >> Access Control List
8. (IF using SSL, see next section first) Client machines need to be bound >> on client >> System Preferences >> Users & Groups >> Login Options >> Network Account Server >> Join >> server name >> authenticate / OK