立即与支持人员聊天
与支持团队交流

Safeguard Authentication Services 5.0.2 - macOS Administration Guide

Privileged Access Suite for Unix Installation Safeguard Authentication Services macOS components Safeguard Authentication Services client configuration Special macOS features Limitations on macOS Group Policy for macOS Certificate Autoenrollment Glossary

macOS management modes

The following management modes exist for macOS policy settings:

Table 1: macOS: Management modes
Mode Description
Never This mode means that the settings do not apply. This is equivalent to disabling the policy. This is the default mode.
Once In this mode, policy settings are applied one time. Users can remove the Configuration Profile. This mode functions as a default value.
Always In this mode, policy settings will always apply. Users cannot remove the Configuration Profile.

Installing profiles on macOS 11.0 and later

Safeguard Authentication Services for macOS relies on the /usr/bin/profiles command to install configuration profiles. Starting in macOS version 11.0, this command can no longer be used to add profiles. To create a profile on macOS 11.0, use the System Preferences pane.

When installing profiles with system preferences, the agent installs both Device (also known as Machine profiles in the Group Policy plugin) and user profiles.

To install a profile on macOS 11.0 (and later):

  1. Log in to a macOS system.
    A prompt appears, asking you to install a new profile.
  2. Open System Preferences and click Profiles.
  3. In the Profiles pane that appears, click Install.
  4. Device profiles only. In the dialog box that appears, type the user name and password of the device administrator account.

Note: You must specify administrative credentials when creating Device profiles. Any standard user can create a User profile without providing administrative credentials. An Always profile must have a password unique to that profile in order to remove it. A Once profile can be removed at any time.

The new profile is successfully installed and it appears available for selection.

Workgroup Manager settings

Safeguard Authentication Services provides Group Policy extensions that mirror the functionality available in Apple Workgroup Manager console. Workgroup Manager Settings are located in the Mac OS X Settings folder (or in the Policies folder, if you are using the new Group Policy Management Editor.)

To open the properties of the Workgroup Manager settings

  1. Start the Group Policy Management Editor.
  2. Navigate to Computer Configuration | Mac OS X Settings or User Configuration | Mac OS X Settings.
  3. Double-click the Workgroup Manager Settings to open its properties.

Applications Properties

The Applications Properties settings allow you to control access to specific applications and paths to applications using digital signatures.

You can apply Application Properties settings under both Computer Configuration and User Configuration.

There are two tabs:

相关文档

The document was helpful.

选择评级

I easily found the information I needed.

选择评级