Enable/disable synchronization

Enable this group policy to manage mobile accounts.

- Create mobile account even if user does not have a network home directory

Create mobile account for AD user regardless a network home is available for the user. It mitigates the chance that blocking user login when the machine is not connected to AD network.

- Require confirmation before creating mobile account

If you want the user to decide whether to enable a mobile account at login, select this option.

If this option is selected, the user sees a confirmation when logging in. The user can click "Create Now" to create a local home folder and enable the mobile account, click "Don't Create" to log in as a network user without enabling the mobile account, or click "Cancel Login" to return to the login window.

Once enabled, this group policy takes effect when users log out and back in.

FileVault protection will only take effect when a new mobile user is being created during login. This group policy will not transform an existing mobile user home directory from unencrypted into encrypted.

Create mobile account even if user does not have a network home directory

Registry Hive	HKEY_CURRENT_USER
Registry Path	Software\Policies\Centrify\CentrifyDC\Settings\MacMCX\Mobility
Value Name	MobileAcctWithoutHome
Value Type	REG_SZ
Default Value	0
True Value	1
False Value	0

Require confirmation before creating a mobile account

Registry Hive	HKEY_CURRENT_USER
Registry Path	Software\Policies\Centrify\CentrifyDC\Settings\MacMCX\Mobility
Value Name	MacMCXSyncRequireConfirmation
Value Type	REG_SZ
Default Value	1
True Value	1
False Value	0

--- FileVault protection ---

Encrypt contents with FileVault

Registry Hive	HKEY_CURRENT_USER
Registry Path	Software\Policies\Centrify\CentrifyDC\Settings\MacMCX\Mobility
Value Name	EnableFileVault
Value Type	REG_SZ
Default Value	0
True Value	1
False Value	0

Enable/disable synchronization

0. Use computer master password, if available
   

   Registry Hive	HKEY_CURRENT_USER
   Registry Path	Software\Policies\Centrify\CentrifyDC\Settings\MacMCX\Mobility
   Value Name	RequireMasterPassword
   Value Type	REG_SZ
   Value	0

1. Require computer master password
   

   Registry Hive	HKEY_CURRENT_USER
   Registry Path	Software\Policies\Centrify\CentrifyDC\Settings\MacMCX\Mobility
   Value Name	RequireMasterPassword
   Value Type	REG_SZ
   Value	1