Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >
article

KB-5187: How to set up the "Enable Administrator Access Groups" group policy

Centrify Identity Service, Mac Edition ,  

12 April,16 at 11:14 AM

Applies to: Centrify DirectControl on Mac OS X 10.X

Question:

How is the "Enable Administrator Access Groups" group policy set up for Apple Remote Desktop group management?


Answer:

This policy will enable Apple Remote Desktop rights for four Active Directory Groups:
 
ard_adminGives all members of the group the ability to fully remotely control the computer desktop.
ard_manageGives all members of the group the ability to manage the computer using ARD.  Users in this group can perform the following tasks by using ARD: Generate reports, open and quit applications, copy items, delete and replace items, send text messages and restart and shut down.
ard_interactGives all members of the group the ability to interactively observe or control the computer using ARD.  Users in this group can perform the following tasks: Send text messages, observe and control.
ard_reportsGives all members of the group the ability to remotely generate reports on the computer.

These groups are not automatically created within Active Directory; they will need to be created in AD with the same name format as above.

In order to grant ARD rights to a user, they simply needed to be added into the appropriate group.  After they are added into the AD group, they will be able to perform the ARD functions delegated to them from the group, on any computer object that receives the "Enable Administrator Access Groups" group policy. 

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.