Thursby Software ADmitMac 5.1, EDU, 100Ct Mac, VLA, UPG NDA195-E100 Fascicule
Codes de produits
NDA195-E100
e-mail:
Telephone: +1 (817) 478-5070
Thursby Software Systems, Inc.
5840 W. Interstate 20
Arlington, Texas 76017 U.S.A.
5840 W. Interstate 20
Arlington, Texas 76017 U.S.A.
ADmitMac and DAVE are registered trademarks of Thursby Software Systems, Inc.
Apple and Macintosh are registered trademarks and Mac is a trademark of Apple, Inc.
Microsoft, Windows, Windows NT, Windows 2000, Windows XP, Windows Vista, Windows 7, Server 2003, Server 2008 and Active Directory are
registered trademarks of Microsoft Corporation.
All other trademarks are the property of their respective owners.
Apple and Macintosh are registered trademarks and Mac is a trademark of Apple, Inc.
Microsoft, Windows, Windows NT, Windows 2000, Windows XP, Windows Vista, Windows 7, Server 2003, Server 2008 and Active Directory are
registered trademarks of Microsoft Corporation.
All other trademarks are the property of their respective owners.
July 15, 2010
ADmitMac v5.1 for Mac OS X 10.5.x, 10.6.x (Leopard and Snow Leopard).
© 2010 Thursby Software Systems, Inc.
ADVANCED FEATURES
• Allows for user login with home directories located on
the Macintosh client’s local hard disk.
• Automatically configures Macintosh for use with
Kerberos. Kerberos configuration files are generated
automatically.
automatically.
• Fully signed and sealed (encrypted) LDAP connections
prevent disclosure of user’s personal information and
prevent man-in-the-middle attacks.
prevent man-in-the-middle attacks.
• Support for bidirectional SMB-signed connections,
NTLM SSP, and NTLMv2.
• Expired and reset passwords are handled correctly when
users log in to the Macintosh desktop.
• Caches user credentials for mobile user access when not
connected to the network.
• Supports browsing for published shares.
• Print client can access shared printers. Printers may be
• Print client can access shared printers. Printers may be
configured by browsing the list of printers published in
a domain, or entered manually.
a domain, or entered manually.
• Kerberos credentials are set up automatically when a
user logs in. No changes to
/etc/authorization
are
required.
• Support for cross-realm trusts with MIT Kerberos.
• Support for multiple domains within a forest.
• Administrators can choose domain search paths for users,
• Support for multiple domains within a forest.
• Administrators can choose domain search paths for users,
groups, published printers and shares to limit searches
to specific organizational units.
to specific organizational units.
• Administrators can choose to give local administrative
privileges to domain members based on their username
or domain group membership.
or domain group membership.
• Administrators can give administrative privileges to the
user specified as the Macintosh’s manager in the domain
computer records.
computer records.
• Supports Mac OS X Server service principal names.
• Home directories may be located in a path where the user
• Home directories may be located in a path where the user
does not have access to the parent folders.
• Administrators can utilize Apple’s Workgroup Manager
MCX settings. MCX settings are now replicated to each
Macintosh so they are always available even when the
Macintosh so they are always available even when the
Macintosh is disconnected from the
network.
network.
• ADmitMac Deployment utility creates custom
ADmitMac install packages for large multi-computer
installations. Custom install packages support
automatic installation mode where Macintosh
clients are fully configured and joined to a domain
without requiring human interaction.
installations. Custom install packages support
automatic installation mode where Macintosh
clients are fully configured and joined to a domain
without requiring human interaction.
• Dynamic DNS registration support: the Mac
will register its IP addresses with DNS using its
computer account name.
computer account name.
• Supports extended attributes.
• AD Commander tool allows administrators to edit
• AD Commander tool allows administrators to edit
Active Directory users and groups as if you were
using AD Administrator Tools.
using AD Administrator Tools.
• Windows administrators can manage Mac
operating system components and applications in
Active Directory using Group Policy.
Active Directory using Group Policy.
• Conforms with Microsoft SMB/CIFS standards,
including use of TCP port 445, NetBIOS-less
communication and to the following RFCs:
communication and to the following RFCs:
1001,1002 Protocol standard for a NetBIOS service on
a TCP/UDP transport
1510
The Kerberos Network Authentication
Service (V5)
Service (V5)
1777
Lightweight Directory Access Protocol
(LDAP)
(LDAP)
2743
Generic Security Service Application
Program Interface Version 2
Program Interface Version 2
1964
The Kerberos Version 5 GSS-API
Mechanism
Mechanism
2222
Simple Authentication and Security Layer
3244
Microsoft Windows 2000 Kerberos Change
Password and Set Password Protocols
Password and Set Password Protocols