Chat now with support
Chat with Support

Safeguard Authentication Services 4.1.5 - Mac OS X/macOS Administration Guide

One Identity Privileged Access Suite for Unix Installation The Authentication Services Mac OS X components Configuring the Authentication Services client Special Mac OS X features Authentication Services limitations on Mac OS X Authentication Services Group Policy for Mac OS X Certificate Autoenrollment

Legacy tab

The Legacy tab settings control which applications are allowed to execute on Mac OS X 10.4 systems and supports the following management modes: Never, Always.

To control application restrictions on newer systems use the settings on the Applications tab. Legacy Application settings support a single list of Unix paths. Applications residing in a path in the list are allowed to execute if you select the User can open only these applications option, or prevented from executing if you select the User can open all applications except these option. The path list functions as a deny list or an allow list, but not both.

The following options are also supported:

  • User can also open all applications on local volumes

    Select to allow users to execute all applications on local volumes. When not selected, the application must be allowed through the application path list configuration.

  • Allow approved applications to launch unapproved applications

    Select to allow approved applications to execute unapproved applications. When not selected, approved applications fail if they attempt to launch unapproved applications.

  • Allow Unix tools to run

    Select to allow users to execute standard Unix command line tools. When not selected, you must explicitly allow Unix tools to run through the path list configuration.

Widgets tab

Widgets tab settings allow you to configure which Dashboard widgets are allowed to execute on Mac OS X clients. By default Authentication Services enables a set of common Dashboard widgets for management. If you want to customize the set of available Dashboard widgets you can edit the widgets.xml file which is installed into the Authentication Services installation directory. Widgets settings supports the following management modes: Never, Always.

If you select the Allow only the following Dashboard widgets to run: option, only the listed widgets are allowed. Click Add and Remove to configure the set of allowed widgets.

Classic properties

The Classic Properties settings allows you to set Classic startup options, assign a Classic System folder, set sleep options for the Classic environment, and make specific Apple menu items available to users.

You can apply Classic Properties settings under both Computer Configuration and User Configuration.

Note: Classic configuration settings apply only to computers running Mac OS X 10.4.

Related Topics

Startup tab

Advanced tab

Startup tab

Classic is the Mac OS 9 emulator for Mac OS X. Classic allows legacy Mac OS 9 applications to run on Mac OS X. Startup tab settings supports the following management modes: Never, Always.

Startup tab settings are used to configure the following behaviors of Classic:

  • Start up Classic at login

    Normally Classic starts when a legacy application is launched. If you enable this option, Classic starts at login, making legacy applications appear more responsive when launched.

  • Warn at Classic startup

    Select to trigger a warning when an application starts Classic.

  • Use this System Folder when Classic starts

    Classic requires a full Mac OS 9 system installation. Select this option to specify which folder you want to contain the Mac OS 9 system. Specify the folder as an absolute path. Click Remote Browse to log into a remote Macintosh system by means of SSH and browse for a folder.

Related Documents