Using Centrify's DirectControl with Mac OS X - Cerberis

More documents

Recommendations

Info

CENTRIFY WHITE PAPERUSING CENTRIFY’S DIRECTCONTROL WITH MAC OS XUser PolicyCategoryDesktop & ScreenSaverIndividual Policies That Can Be Enforced• Enforce screen saver• Screen saver timeoutDock Settings • Dock size• Magnification• Position on screen• Animation for application opening• Auto hide the Dock• Lock the Dock display to prevent changes• Control applications displayed in the Dock• Display other folders or documents in the DockFinder Settings • Set Finder Type to Normal or SimpleFolder Redirection • At Login, Logout or periodic intervals perform thefollowing folder redirection settings.• Delete a user’s path• Delete symbolic links• Create symbolic links• Rename symbolic linksOther ApplicationSettingsMedia AccessControlsMobility SyncSettings• Distribute application specific plist files• Control access to CDs and CD-ROMs• Control access to DVDs• Control access to recordable discs• Control access to internal disks• Control access to external disks (including USB Flash disksand iPods)• Force eject of removable media at logout• Control synchronization• Control what items will sync at login/logout• Control what items will sync in the background• Control what items should be skippedScripts • Specify login and logout scriptsSecurity • Require password to wake this computer from sleep orscreen saver• Smart card removal policy to lock screen or logout• Prohibit screen saver unlock with expired password (whenoffline)System PreferenceSettings• Limit which items will be shown in System Preferences• Control display of each item in System Preferences© 2006-2008 CENTRIFY CORPORATION. ALL RIGHTS RESERVED. 17
CENTRIFY WHITE PAPERUSING CENTRIFY’S DIRECTCONTROL WITH MAC OS XUser policies such as these can be applied in many ways. The typical method is to applythe policy to an OU within Active Directory, which will apply the policy to all the userswithin that OU of the directory. Other methods of applying these user policies includegroup filtering, which allows the policy to be applied at a higher level within theDirectory tree structure so that an Active Directory group can be used as the filter so thatthe policy would apply only to the members of that group. Another more complexmethod is to apply the policy to an OU of computers so that the specific user policies willbe applied to the users when they login to these specific computers, which is called loopback processing.Once policies have been applied to the appropriate domain, OU or filtered on a group, thepolicies will be applied to the Mac OS X system as soon as the user logs into the ActiveDirectory domain. This ensures that the most current policy is enforced at all times acrossthe enterprise.These user policies can be used to ensure that the user is presented a consistent andcontrolled desktop environment as well as to prevent the user from changing systemsettings that are under administrative control either manually or via Group Policy control.The following Group Policy is used to define the user’s ability to see the SystemPreferences, specifically the System items within the System Preferences.Figure 6. With Group Policy you can control the Mac OS X desktop environment andprevent users from using specific System items.Once these settings are defined and a user logs into the system, they will be able to seeonly the System Preference items that are enabled; disabled items are not shown. Based© 2006-2008 CENTRIFY CORPORATION. ALL RIGHTS RESERVED. 18
Page 1 and 2: WHITE PAPERCENTRIFY CORP.OCTOBER 20
Page 3 and 4: CENTRIFY WHITE PAPERUSING CENTRIFY
Page 19: CENTRIFY WHITE PAPERUSING CENTRIFY
Page 31: CENTRIFY WHITE PAPERUSING CENTRIFY

Using Centrify's DirectControl with Mac OS X - Cerberis

You also want an ePaper? Increase the reach of your titles

Delete template?

Save as template?