Chat now with support

Get Live Help
Complete Registration

Sign In

Request Pricing

Contact Sales

NOTICE! We are upgrading our support telephone services, implementing Genesys, starting the week of May 19, 2025

Safeguard Authentication Services 5.0 - macOS Administration Guide

Table of Contents

Privileged Access Suite for Unix

About this guide

Safeguard Authentication Services macOS agent installation

Installing using the graphical system installer Installing with the wizard Custom installation Command line installation

Installing the metapackage from command line Mounting and unmounting the .dmg from the command line

Agent upgrade macOS agent removal

Safeguard Authentication Services macOS components

Startup items Directory Service plugin Directory Utility

Safeguard Authentication Services client configuration

Join the Active Directory domain

Using QAS Join application Unjoining an Active Directory domain Command line join Using Terminal.app to join and unjoin System changes made by the join process Verifying the installation and configuration

Log in with Active Directory accounts

Unix-enable a user

Troubleshooting connections to Windows SMB shares

Connecting to SMB shares on domain controllers The DNS domain name differs from the Kerberos realm

Automatically mount network home folders

Configuring automatic home folder mounting at join time Mounting the Windows home folder or profile path Mounting an alternate share at login Configure automatic home folder mounting using Group Policy Group permissions on auto-mounted home directories Mounting AFP shares

Special macOS features

Local administrator rights for users

Granting accounts administrator rights

Active Directory user password hint Configuring Apple FileVault disk encryption

Limitations on macOS Group Policy for macOS

Profile-based policy

macOS management modes Workgroup Manager settings

Applications Properties

Applications tab Options tab

Dock Properties

Dock Items tab Dock Display tab

Energy Saver Properties

Desktop tab Portable tab Battery tab Schedule tab

Finder Properties Login Properties

Window tab Options tab Access tab Scripts tab Items tab

Adding login items

Media Access Properties

Media Access tab

Network Properties

Sharing & Interfaces tab

Parental Controls Properties Printing Properties

Adding a printer

Software Update Properties

Software Update tab

System Preferences Properties

System Preferences tab

Time Machine Properties

Time Machine tab

Wireless Profile Properties

Adding wireless profiles

Preference Manifest settings

Adding a preference manifest

Certificate Autoenrollment

Certificate Autoenrollment on macOS Certificate Autoenrollment requirements and setup

Java requirement: Unlimited Strength Jurisdiction Policy Files Installing certificate enrollment web services Configuring Certificate Services Client - Certificate Enrollment Policy Group Policy Configuring Certificate Services Client - Auto-Enrollment Group Policy Configuring Certificate Templates for autoenrollment

Using Certificate Autoenrollment

Configuring Certificate Autoenrollment manually

Configure a machine for Certificate Autoenrollment Configure a user for Certificate Autoenrollment

Trigger machine-based Certificate Autoenrollment

Troubleshooting Certificate Autoenrollment

Certificate Autoenrollment process exited with an error Enable full debug logging Pulse Certificate Autoenrollment processing Manually apply Group Policy

Command line tool

vascert command reference

vascert commands and arguments

Related Documents

The document was helpful.

Select Rating

I easily found the information I needed.

Select Rating

© 2025 One Identity LLC. ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center