Setting computer-based policies for Mac

The following table provides a summary of the group policies you can set for Mac computers. These group policies are in the Centrify Mac administrative template (centrify_mac_settings.xml) and accessed from Computer Configuration > Policies > Centrify Settings > Mac OS X Settings.

Use this policy To do this

Allow certificates with no extended key usage certificate attribute

For smart card log in, allow the use of certificates that do not contain the extended key usage (EKU) attribute. This is a Windows policy that is defined in the Administrative Templates > Windows Components > Smart Card folder using an adm template.

Map /home to /Users

Map the /home/username directory to /Users/username. This is a Mac OS X-specific policy but defined in the Direct Control Settings > Adclient Settings folder using the centrifydc_settings.xml template.

802.1X Settings

Create login and system profiles for wireless authentication.

These group policies correspond to 802.1X Options in the Networks system preference.

Accounts

Control the look and operation of the login window on Mac computers and map zone groups to the local administrator group.

These group policies correspond to Login Options in the Accounts system preference.

App Store Settings (Deprecated)

Control the users and groups who can access the App Store.

These group policies correspond to settings in the Sleep and Options panes in the Energy Saver system preference.

Custom Settings

Customize and install configuration profiles.

Energy Saver

Control sleep and wake-up option on Mac computers.

These group policies correspond to settings in the Sleep and Options panes in the Energy Saver system preference.

Firewall

Control the firewall configuration on Mac computers.

These group policies correspond to settings in the Firewall pane of the Sharing system preference.

Internet Sharing

Manage Internet connections on Mac computers.

These group policies correspond to settings in the Internet pane of the Sharing system preference.

Network

Control DNS searching and proxy settings.

These group policies correspond to settings in the TCP/IP and Proxies panes of the Network system preference.

Remote Management

Control Apple Remote Desktop access for zone users. These group policies correspond to the Manage > Change Client Settings options in Apple Remote Desktop.

Security & Privacy

Control security settings on Mac computers.

These group policies correspond to settings in the Security system preferences.

Services

Control access to various services on Mac computers.

These group policies correspond to settings in the Services pane of the Sharing system preference.

Software Update Settings

Control the options for automatic software updates on Mac computers.

These group policies correspond to settings in the Software Update system preference.

For information about specific policies and how to set them, see the policy description (Explain text) or the corresponding discussion of the specific system preference or individual setting in the Mac Help.