Enable administrator access groups

Enable this policy to allow users in specific zone groups to manage Mac computers via Apple Remote Desktop.

If this policy is enabled, users in specific zone groups can access Mac machine via Apple Remote Desktop with the following privileges:

- ard_admin group
Users in this group will have full access privileges.

- ard_manage group
Users in this group can manage Mac machines. Manage means generate reports, open and quit applications, change settings, copy items, delete and replace items, send messages, and restart and shut down.

- ard_interact group
Users in this group can interact with Mac machines. Interact means send messages, control, and observe.

- ard_reports group
Users in this group can generate reports.


Once enabled, this policy can take effect dynamically at the next group policy refresh interval.

Supported on:

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Centrify\CentrifyDC\Settings\Mac\RemoteDesktop\DirectoryGroups
Value Nameenablegroups
Value TypeREG_SZ
Enabled Value1
Disabled Value0
Enable policy:
Registry PathValue NameValue TypeValue
Software\Policies\Centrify\CentrifyDC\Settings\Mac\RemoteDesktop\DirectoryGroupsardadminREG_SZard_admin
Software\Policies\Centrify\CentrifyDC\Settings\Mac\RemoteDesktop\DirectoryGroupsardreportREG_SZard_reports
Software\Policies\Centrify\CentrifyDC\Settings\Mac\RemoteDesktop\DirectoryGroupsardmanageREG_SZard_manage
Software\Policies\Centrify\CentrifyDC\Settings\Mac\RemoteDesktop\DirectoryGroupsardinteractREG_SZard_interact
Disable Policy:
Registry HiveRegistry PathValue NameValue TypeValue
HKEY_LOCAL_MACHINESoftware\Policies\Centrify\CentrifyDC\Settings\Mac\RemoteDesktop\DirectoryGroupsardadminREG_SZ
HKEY_LOCAL_MACHINESoftware\Policies\Centrify\CentrifyDC\Settings\Mac\RemoteDesktop\DirectoryGroupsardreportREG_SZ
HKEY_LOCAL_MACHINESoftware\Policies\Centrify\CentrifyDC\Settings\Mac\RemoteDesktop\DirectoryGroupsardmanageREG_SZ
HKEY_LOCAL_MACHINESoftware\Policies\Centrify\CentrifyDC\Settings\Mac\RemoteDesktop\DirectoryGroupsardinteractREG_SZ

centrify_mac_settings.admx

Administrative Templates (Computers)

Administrative Templates (Users)