Import MCX setting plist files
Path
User Configuration > Policies > Centrify Settings > Mac OS X Settings > Import Settings > Import MCX setting plist files
Description
Enable this group policy to import raw MCX settings plist files from SYSVOL. By default the folder is \\<domain>\SYSVOL\<domain>\mcxplist, similar to importing plist files in Mac Workgroup Manager.
The plist file path that you specify is relative to this path:
\\<domain>\SYSVOL\<domain>\mcxplist
For example, if you specify this path:
com.apple.MCX.plist
the following plist file is imported:
\\<domain>\SYSVOL\<domain>\mcxplist\com.apple.MCX.plist
This group policy is similar to "Import plist files". However, instead of extracting MCX settings from the plist file like "Import plist files" does, this policy imports the entire plist file without processing it.
An example plist file format is as follows:
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>mcx_application_data</key>
<dict>
<key>TARGET</key>
<dict>
<key>Forced</key>
<array>
<dict>
Settings
</dict>
</array>
</dict>
</dict>
</dict>
</plist<
In this example, TARGET is the targeted MCX settings (such as com.apple.dock or com.apple.finder)
The recommended way to obtain the plist file with the correct format is by using the dscl command, and reading the MCX settings attribute of the user object that has the same MCX settings configured. Then copy the exact MCX settings and paste them into a plist file.
For example:
dscl /CentrifyDC read /Users/XXXX MCXSettings
where XXXX is an Active Directory user with the desired MCX settings.