Scripts tab
The Scripts tab settings of the Login Properties control scripts that run at login and logout; and, support the following management modes: Never, Always.
You can specify shell scripts that you want to run when a user logs in or out on macOS. Scripts are stored in the policy settings so you can browse to local files or remote hosts to select the script to use. Scripts configured through Group Policy run as root with the trust value of FullTrust.
NOTE: Test scripts thoroughly before deploying them with Group Policy.
The following options are supported:
-
Login script
Specify the script to execute when the user logs in.
-
Also execute the client computer's LoginHook script
Select to allow the LoginHook script to run. The LoginHook script is a locally configured script that runs at login.
-
Log-Out script
Specify the script to execute when the user logs out.
-
Also execute the client computer's LogoutHook script
Select to allow the LogoutHook script to run. The LogoutHook script is a locally configured script that runs at log-out.
Items tab
The Items tab settings of the Login Properties, control items that are started automatically when a user logs in and support the following management modes: Never, Once, Always.
NOTE: The Items tab is only available in Users Configuration.
To run items automatically when a user logs in, see Adding login items.
The following options are supported:
-
User may add and remove additional items
Select to allow users to add and remove additional items by means of local configuration. You can only configure this option if the management mode is set to Always.
-
User may press Shift to keep items from opening
Select to allow users to press shift to prevent items from opening automatically. You can only configure this option if the management mode is set to Always.
-
Merge with user's items
Select to merge the configured items with the user's items. You can only configure this option if the management mode is set to Once.
Adding login items
NOTE: This procedure shows you how to add an item that starts automatically from the Items tab.
To add login items
-
Click Add to type the full path to the volume, document, folder or application. Alternatively, you can click Browse to browse for the path to the item on a remote macOS system. Items open in the order they are listed.
-
Select the Hide option and to start the item in a minimized state on the Dock. This prevents screen clutter when starting several items while still making the items easily accessible.
-
Click Apply.
Media Access Properties
The Media Access Properties settings allows you to control settings for and access to AirDrop, CDs, DVDs, the local hard disk, and external disks (for example, floppy disks and FireWire drives).
You can apply Media Access Properties settings under both Computer Configuration and User Configuration.
