Thursby Software ADmitMac 5.1, 600Ct Mac, VLA AVL195-C600 Dépliant

e-mail:

Telephone: +1 (817) 478-5070

Thursby Software Systems, Inc.
5840 W. Interstate 20
Arlington, Texas 76017 U.S.A.

ADmitMac and DAVE are registered trademarks of  Thursby Software Systems, Inc.  
Apple and Macintosh are registered trademarks and Mac is a trademark of Apple, Inc.
Microsoft, Windows, Windows NT,  Windows 2000,  Windows XP,  Windows Vista, Windows 7, Server 2003, Server 2008 and Active Directory are 
registered trademarks of Microsoft Corporation.  
All other trademarks are the property of their respective owners.

July 15, 2010

© 2010 Thursby Software Systems, Inc.

ADVANCED FEATURES

 

• Allows for user login with home directories located on 

the Macintosh client’s local hard disk.

• Automatically  configures  Macintosh  for  use  with 

Kerberos.  Kerberos  configuration  files  are  generated 
automatically.

• Fully signed and sealed (encrypted) LDAP connections 

prevent  disclosure  of  user’s  personal  information  and 
prevent man-in-the-middle attacks.

• Support  for  bidirectional  SMB-signed  connections, 

NTLM SSP, and NTLMv2.

• Expired and reset passwords are handled correctly when 

users log in to the Macintosh desktop.

• Caches user credentials for mobile user access when not 

connected to the network.

• Supports browsing for published shares.
• Print client can access shared printers. Printers may be 

configured by browsing the list of printers published in 
a domain, or entered manually.

•  Kerberos  credentials  are  set  up  automatically  when  a 

user logs in. No changes to 

/etc/authorization

 are 

required.

• Support for cross-realm trusts with MIT Kerberos.
• Support for multiple domains within a forest.
• Administrators can choose domain search paths for users, 

groups,  published printers and shares to limit searches 
to specific organizational units.

•  Administrators  can  choose  to  give  local  administrative 

privileges to domain members based on their username 
or domain group membership.

• Administrators can give administrative privileges to the 

user specified as the Macintosh’s manager in the domain  
computer records.

• Supports Mac OS X Server service principal names.
• Home directories may be located in a path where the user 

does not have access to the parent folders.

• Administrators can utilize Apple’s Workgroup Manager 

MCX settings.  MCX settings are now replicated to each 
Macintosh  so  they  are  always  available  even  when  the 

Macintosh  is  disconnected  from  the 
network.

• ADmitMac  Deployment  utility  creates  custom 

ADmitMac install packages for large multi-computer 
installations.    Custom  install  packages  support 
automatic  installation  mode  where  Macintosh 
clients are fully configured and joined to a domain 
without requiring human interaction.

• Dynamic DNS registration support: the Mac 

will register its IP addresses with DNS using its 
computer account name. 

• Supports extended attributes.
• AD Commander tool allows administrators to edit 

Active Directory users and groups as if you were 
using AD Administrator Tools.

• Windows administrators can manage Mac 

operating system components and applications in 
Active Directory using Group Policy.

• Conforms  with  Microsoft  SMB/CIFS  standards, 

including  use  of  TCP  port  445,  NetBIOS-less 
communication and to the following RFCs:

  1001,1002  Protocol standard for a NetBIOS service on 

a TCP/UDP transport

  1510 

The Kerberos Network Authentication 
Service (V5)

  1777 

Lightweight Directory Access Protocol 
(LDAP)

  2743 

Generic Security Service Application 
Program Interface Version 2

  1964 

The Kerberos Version 5 GSS-API 
Mechanism

  2222 

Simple Authentication and Security Layer

  3244 

Microsoft Windows 2000 Kerberos Change 
Password and Set Password Protocols