Enable this policy to allow users in specific zone groups to manage Mac computers via Apple Remote Desktop.
If this policy is enabled, users in specific zone groups can access Mac machine via Apple Remote Desktop with the following privileges:
- ard_admin group
Users in this group will have full access privileges.
- ard_manage group
Users in this group can manage Mac machines. Manage means generate reports, open and quit applications, change settings, copy items, delete and replace items, send messages, and restart and shut down.
- ard_interact group
Users in this group can interact with Mac machines. Interact means send messages, control, and observe.
- ard_reports group
Users in this group can generate reports.
Once enabled, this policy can take effect dynamically at the next group policy refresh interval.
Registry Hive | HKEY_LOCAL_MACHINE |
Registry Path | Software\Policies\Centrify\CentrifyDC\Settings\Mac\RemoteDesktop\DirectoryGroups |
Value Name | enablegroups |
Value Type | REG_SZ |
Enabled Value | 1 |
Disabled Value | 0 |
Registry Path | Value Name | Value Type | Value |
---|---|---|---|
Software\Policies\Centrify\CentrifyDC\Settings\Mac\RemoteDesktop\DirectoryGroups | ardadmin | REG_SZ | ard_admin |
Software\Policies\Centrify\CentrifyDC\Settings\Mac\RemoteDesktop\DirectoryGroups | ardreport | REG_SZ | ard_reports |
Software\Policies\Centrify\CentrifyDC\Settings\Mac\RemoteDesktop\DirectoryGroups | ardmanage | REG_SZ | ard_manage |
Software\Policies\Centrify\CentrifyDC\Settings\Mac\RemoteDesktop\DirectoryGroups | ardinteract | REG_SZ | ard_interact |
Registry Hive | Registry Path | Value Name | Value Type | Value |
---|---|---|---|---|
HKEY_LOCAL_MACHINE | Software\Policies\Centrify\CentrifyDC\Settings\Mac\RemoteDesktop\DirectoryGroups | ardadmin | REG_SZ | |
HKEY_LOCAL_MACHINE | Software\Policies\Centrify\CentrifyDC\Settings\Mac\RemoteDesktop\DirectoryGroups | ardreport | REG_SZ | |
HKEY_LOCAL_MACHINE | Software\Policies\Centrify\CentrifyDC\Settings\Mac\RemoteDesktop\DirectoryGroups | ardmanage | REG_SZ | |
HKEY_LOCAL_MACHINE | Software\Policies\Centrify\CentrifyDC\Settings\Mac\RemoteDesktop\DirectoryGroups | ardinteract | REG_SZ |