Enabling transparent identification of Mac users with DC Agent

In order for DC Agent to identify the user on a Mac workstation, the Mac must mount a file share on the domain controller. This can be done by configuring the Mac to use a file share on the domain controller machine as the user’s home directory, or by mounting another share with the domain controller.

Note: If the Mac only logs to the domain without mounting a file share, it will not be visible to DC Agent.

Configuration summary:

Ensure that each participating Mac user is a member of a common Active Directory. See your Active Directory documentation.
Create a home folder for each Mac user, and make sure that it is accessible to the user. See the first paragraph of this section.

When the user logs on to the properly configured Mac OS X system, the Mac mounts a network directory as the user’s home directory, the DC Agent user map is populated, and user and group-based policies can be applied to user requests. When requests are blocked, browser-based block pages are displayed normally.