Cross-Platform Group Policy

Apply Group Policies to Linux, Unix, and Mac from Active Directory

The Likewise Enterprise 5.0 group policy features for Linux, Unix, and Mac OS X computers are the most comprehensive available. This page presents a list of nearly all the Likewise group policies that Likewise Enterprise populates in the Group Policy Object Editor.

For Unix system like Sun Solaris, Likewise includes settings for managing syslogs, crontabs, sudoers files, and other configurations.

For Mac OS X computers, Likewise includes Mac-specific policies for setting Mac system preferences and configuring security options such as the built-in firewall. In addition, Likewise Enterprise hooks Workgroup Manager up with Active Directory by applying Managed Client Settings (MCX) as standard Microsoft Active Directory group policy objects, or GPOs, giving you a powerful method for managing all your Mac system preferences from a centralized location on your Mac administrative workstation.

For Linux, Likewise Enterprise includes several thousand Gnome group policies for Linux user and computer settings -- policies that are based on the Gnome GConf project to define desktop and application preferences such as the default web browser. These Gnome policies, which can be applied to Linux computers running the Gnome desktop, are integrated into the Group Policy Object Editor, making them easy to manage and apply.

Macintosh Group Policies

Automatically Restart a Mac After Losing Power
Block UDP Traffic on a Mac
Disable Automatic User Login on a Mac
Log Firewall Activity on a Mac
Put the Computer to Sleep with the Power Button
Secure System Preferences on a Mac
Set MCX Policies with Workgroup Manager
Supported Mac Versions
Requirements
Mac Prerequisites
Windows Prerequisites
Set an MCX Policy with Workgroup Manager
Check the Application of Your Preferences
How Likewise Applies Workgroup Manager Settings as GPOs
Set the Disk Sleep Timer
Set the Display Sleep Timer
Set the System Sleep Timer
Share an Internet Connection with Bluetooth Devices
Start the Bluetooth Setup Assistant
Turn Bluetooth On or Off
Turn On AppleTalk
Use Firewall Stealth Mode on a Mac
Use Secure Virtual Memory on a Mac
Wake Up the Computer for LAN Admin Access
Wake Up the Computer When the Modem Rings

Likewise Settings

LSASSD

Allow Access to Samba Server Null-Password Accounts
Allow Cached Logons
Allow Logon Rights
Allow Offline Logon Support
Copy Template Files When Creating a Home Directory
Create a k5login File in a User's Home Directory
Create a Home Directory for a User Account at Logon
Digitally Sign Client Communications
Digitally Sign Server Communications
Log on using Kerberos Authentication
Log PAM Debugging Information
Monitor Sudoers File
Refresh Kerberos Tickets
Replace Spaces in Names with a Character
Send Encrypted Passwords to Third-Party SMB Servers
Set Permissions with a File Creation Mask
Set the Cache Expiration Time
Set the Computer Policy Refresh Interval
Set the Depth of Nested Group Expansion
Set the ID Mapping Cache Expiration Time
Set the ID Mapping Negative Cache Expiration Time
Set the Machine Account Password Expiration Time
Check the Maximum Lifetime for a User Ticket
Set the Maximum Tolerance for Kerberos Clock Skew
Set the Minimum UID-GID Value
Set the Samba Hostname Resolver Cache Timeout
Set the Samba Server LDAP Connection Timeout
Set the User Policy Loopback Processing Mode
Set the User Policy Refresh Interval
Show a Denied Logon Rights Message
Show a Password Expiration Warning
Turn Off Client LANMAN Authentication
Turn On Client NTLMv2 Authentication

File System Group Policies

Automount a File System
Create Directories, Files, and Links
Specify the File System Mounts (fstab)

Logging and Auditing Group Policies

Create a SysLog Policy
Rotate Logs
Secure Computers with an AppArmor Policy
Secure Computers with an SELinux Policy

Message Group Policies

Display a Message of the Day
Display a Message with a Login Prompt Policy

Network Group Policies

Set DNS Servers and Search Domains

Security Group Policies

Define a Sudo Policy
Define a Sudo Policy
Require Complex Passwords
Set the Maximum Password Age
Set the Minimum Password Age
Set the Minimum Password Length

Task Group Policies

Run a Script File
Schedule Cron Jobs with a crontab or crond Policy

Gnome Group Policies

Different Linux distributions with the same Gnome desktop version may contain different Gnome-based user settings. The Gnome-based group policies that are available for Red Hat, for example, might differ from those that are available for SUSE. Likewise prepackages Gnome group policies for a number of common platforms, including the following:

CentOS
Debian
Fedora
Novell SLES and SLED
Open SUSE
Red Hat
SUSE
Ubuntu

For more information about the Gnome policies packaged with Likewise Enterprise, see Gnome Group Policies for Linux.