Using Centrify's DirectControl with Mac OS X - Cerberis

CENTRIFY WHITE PAPERUSING CENTRIFY’S DIRECTCONTROL WITH MAC OS X• User Group Policy support means users will have a consistent experience as they login to systems across your enterprise, including access to applications, network homedirectories, and the like.7 SummaryCentrify DirectControl enables organizations to leverage their existing investments inMicrosoft’s Active Directory to seamlessly centralize the user management of Mac OS Xsystems as well as to centrally manage configurations and enforce security policies.DirectControl is a single product architecture designed to provide authentication,authorization and policy enforcement across Macintosh, UNIX, and Linux systems aswell as web and Java applications.• Active Directory user accounts can be used to log in to a wide range of operatingsystems and applications as well as to provide single sign-on for end users.• Integration services are modeled after Windows XP to provide consistent operationalbehavior across the enterprise.DirectControl provides broad and robust Group Policy services to enforce centralizedconfiguration and security policies on Macintosh systems, enabling complete replacementof Workgroup Manager with Active Directory-centric tools.• Leveraging existing Active Directory tools enables administrators to minimizeretraining and use the tools that they already know in order to centrally manageconfiguration preferences and policy settings on all systems within the enterprise.• Schema modification are not required, and parallel OpenDirectory infrastructures areeliminated when using DirectControl and Group Policy for centralized configurationmanagement.DirectControl’s unique Zone technology provides the ability to manage access rightsindependently for each Zone and to achieve separation of duties for central IT staff andlocal system administrators.• Mac system administrators can be granted individual rights to manage accesspermissions within their Zone of computers independent of other Mac (and UNIX orLinux) administrators and their Zones.• Users can have independent and unique Mac profiles for different groups of Macsystems versus a single Mac account profile for all systems joined to ActiveDirectory.© 2006-2008 CENTRIFY CORPORATION. ALL RIGHTS RESERVED. 27