Microsoft Group Policy for Mac OS X
updated 08:15 am EDT, Wed June 7, 2006
Centrify DirectControl
Centrify has announced a new solution that enables IT managers to centrally secure and configure Mac OS X systems through Microsoft Group Policy. DirectControl allows IT professionals to use the same desktop lockdown and configuration management tools that they use for their Windows environment, to improve security and to centrally set policy and perform bulk configuration of Mac OS X systems. Centrify also announced today that Centrify DirectControl now supports Mac OS X on Intel-based systems, in addition to its current support for Mac OS X on PowerPC.
DirectControl's Mac OS X group policies help IT managers increase desktop security by enforcing password locks on screensavers, setting and managing firewall settings, locking down system preferences, controlling energy-saver functions, controlling Internet sharing settings, and providing a range of other management functions. Centrify DirectControl for Mac OS X pricing begins at $50 per desktop or workstation and $300 per server.
"Microsoft is pleased that Centrify is extending Microsoft Group Policy across heterogeneous environments," said Michael Dennis, Lead Program Manager, Group Policy, of Microsoft. "Enabling the Macintosh for Group Policy is an idea whose time has come," said Jeremy Moskowitz, author, instructor, Group Policy MVP, and owner of GPanswers.com, a web-based Group Policy Resource Center. "This advance will go a long way toward ensuring that all computers in a department receive similarly standardized settings."
The Centrify DirectControl suite consists of the DirectControl Agent and DirectControl Management Tools. The DirectControl Agent enables a UNIX, Linux or Mac OS X computer to join an Active Directory domain and provides comprehensive Active Directory services for that system: authenticates administrator and end-user logins, controls access to any hosted web applications, and implements Group Policy updates.
The DirectControl Management Tools enable administrators to set user and group access rights for the managed systems, set up Centrify Zones, run reports, configure the DirectControl Agents, and import accounts. DirectControl for Mac OS X is installed on the desktop or server to enforce both computer and user group policies. The Group Policy capabilities included with DirectControl for Mac OS X leverage information stored in Active Directory about the machines and users on the network, and deliver robust capabilities such as loop-back filtering.
