Enable Gatekeeper

Enable this group policy to enable/disable the Gatekeeper feature.

Enable Gatekeeper: Click enable to control the Gatekeeper feature

- three options are available for the Gatekeeper feature:

1. Mac App Store - only allow applications downloaded from Mac App Store to install

2. Mac App Store and identified developers - only allow applications downloaded from Mac App Store or application developed by Apple identified developers to install

3. Anywhere - no restriction on application installation at all

On OS X 10.9 and above, select disable/not configured to shut down this GP and Gatekeeper setting will be restored back to the system setting before group policy apply. But on OS X 10.8, select disable/not configured to shut down this GP and Gatekeeper will be set to the Mac system default the "Mac App Store and identified developers" setting.

Once setting is changed, the change can take effect dynamically at the next group policy refresh interval.

--- Mac OS X 10.8 or above settings ---

Allow application downloaded from:

Enable Gatekeeper

0. Mac App Store
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	Software\Policies\Centrify\CentrifyDC\Settings\Mac\Security
   Value Name	gatekeeperoption
   Value Type	REG_SZ
   Value	2

1. Mac App Store and identified developers
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	Software\Policies\Centrify\CentrifyDC\Settings\Mac\Security
   Value Name	gatekeeperoption
   Value Type	REG_SZ
   Value	1

2. Anywhere
   

   Registry Hive	HKEY_LOCAL_MACHINE
   Registry Path	Software\Policies\Centrify\CentrifyDC\Settings\Mac\Security
   Value Name	gatekeeperoption
   Value Type	REG_SZ
   Value	0