Setting Mac OS X Computer Policies

The following table lists the categories of group policies you can set for Mac OS X computers. These group policies are in the Mac OS X administrative template (centrify_mac_settings.xml) and accessed from Computer Configuration > Centrify Settings > Mac OS X Settings.

Use this policy To do this
802.1X Settings Create computer profiles for wireless network authentication.
The profiles you specify with these group policies are created in the Network system preferences pane.
Accounts Control the look and operation of the login window on Mac OS X computers.
These group policies correspond to Login Options in the Accounts system preference.
App Store Settings (Deprecated) This policy was intended to control access to the App Store, however, it has been deprecated and no longer has any effect when enabled. It is provided to allow an administrator to disable the policy if it was set in an earlier version of the authentication service or the agent.
Custom Settings Specify whether to use the Custom payload to specify preference settings for applications that use the standard plist format for their preference files. You can use this group policy to add keys and values to an existing preferences plist file.
Energy Saver Control sleep and wake-up options on Mac OS X computers.
These group policies correspond to settings in the Hardware: Energy Saver system preference.
Firewall Control the firewall configuration on Mac OS X computers.
These group policies correspond to settings in the Firewall pane of the Sharing system preference.
Internet Sharing Manage Internet connections on Mac OS X computers.
These group policies correspond to settings in the Internet pane of the Sharing system preference.
Network Control DNS searching and proxy settings.
These group policies correspond to settings in the TCP/IP and Proxies panes of the Network system preference.
Remote Management Control Apple Remote Desktop access for zone users. These group policies correspond to the Manage > Change Client Settings options in Apple Remote Desktop.
Scripts Deploy login scripts when an Active Directory user or local user logs on to a Mac OS X computer.
You create the scripts and store them in the Active Directory domain’s system volume (sysvol). They are transferred to the Mac OS X computer when the group policies are applied and executed when a user logs on.
Security & Privacy Control security settings on Mac OS X computers.
These group policies correspond to settings in the Personal: Security & Privacy system preferences.
Services Control access to various services on Mac OS X computers.
These group policies correspond to settings in the Services pane of the Sharing system preference.
Software Update Settings Control the options for automatic software updates on Mac OS X computers.
These group policies correspond to settings in the Software Update system preference.

For details on the individual group policies in each category and how to configure specific policies, see the Administrator’s Guide for Mac.