How to get Microsoft Group Policy to work on SL?

Discussion in 'macOS' started by Diversion, Oct 26, 2011.

  1. Diversion macrumors 6502a

    Diversion

    Joined:
    Oct 5, 2007
    Location:
    Jacksonville, Florida
    #1
    Hi,

    We're mostly windows machines and a handful of Macs at my company. We use Websense to block people from most websites.. but if your AD profile has a group added, for example, "Web Access" after a reboot or a forced group policy sync, you will have unrestricted internet access.

    It seems even after I log into one of our Macs using my domain credentials and I go into Safari - i'm still blocked from all websites, as if the mac completely ignored my domain access. As if it's not using my credentials when using the internet.

    Is there something i'm not looking for or a 3rd party solution for this?

    Thanks,

    Div
     
  2. hakuryuu macrumors 6502

    Joined:
    Sep 30, 2007
    Location:
    Lomita, CA
    #2
    OS X doesn't really do single sign-on using AD credentials so it won't pass your user credentials to a service usually. I've not used websense but this is likely the case. We use Sharepoint and a variety of other services that will accept credentials passed through IE.

    Have you tested this in Windows and using Firefox? It likely does the same thing as Safari on Mac.
     
  3. Diversion thread starter macrumors 6502a

    Diversion

    Joined:
    Oct 5, 2007
    Location:
    Jacksonville, Florida
    #3
    I found the only option for me and I tested that it works is a 3rd party AD tool like ADmitMac. It's decently expensive on licenses though. Thanks.
     
  4. itegypt macrumors 6502a

    itegypt

    Joined:
    Aug 6, 2011
    Location:
    FL
    #4
    You can specify a policy by mac IP address in websense
     

Share This Page