Enterprise Connect

com.apple.Enterprise-Connect

Enterprise Connect settings

macOS

exclusive

Configuration Keys (45)

Showing 45 of 45 keys

Key	Type	Description	Default	Range
`adRealm`string Active Directory Realm	string	The host name of your organization's Active Directory domain.	Default: —	Range: —
`PFC_SegmentedControl_0`string required	string	—	Default: —	Range: —
`launchAtLogin`boolean Launch At Login	boolean	Determines if Enterprise Connect should set itself as a login item.	Default: true	Range: —
`runPeriodicStateCheck`boolean Run Periodic State Check	boolean	Enable or Disable periodic state checking. Customers who expose their DNS to the public Internet will need to disable periodic state checking.	Default: true	Range: —
`orgUsernameLabel`string Organization Username Label	string	The name your organization gives usernames.	Default: —	Range: —
`prepopulatedUsername`string Pre Populated Username	string	Upon launch or sign out, Enterprise Connect will pre-populate the Username field with this username.	Default: —	Range: —
`preferredDC`string Preferred Domain Controller	string	Preferred domain controller when doing LDAP queries and getting a Kerberos TGT. If this domain controller is unavailable, Enterprise Connect will fall back to domain controllers it discovers from DNS.	Default: —	Range: —
`setupReminderNagInterval`integer Reminder Nag Interval	integer	The interval, in seconds, between setup notifications.	Default: 86400	Range: —
`getRenewableTGT`boolean Get Renewable TGT	boolean	Acquire a renewable Kerberos TGT.	Default: false	Range: —
`showMenuExtra`boolean Show Menu Extra	boolean	Determines whether the Enterprise Connect menu extra is loaded.	Default: true	Range: —
`checkShowLegacyCertificates`boolean Show Legacy Certificates	boolean	Automatically check the "Show Legacy Certificates" option in the certificate chooser window.	Default: false	Range: —
`showKeychainIdentities`boolean Show Keychain Identities	boolean	Automatically check the "Show Legacy Certificates" option in the certificate chooser window.	Default: false	Range: —
`disableQuitMenu`boolean Disable Quit Menu	boolean	Disables the Quit menu item from Enterprise Connect.	Default: false	Range: —
`orgLogoPath`string Organization Logo Path	string	The path to a file containing your organization's logo, in PNG, JPG or GIF format.	Default: —	Range: —
`debugMode`boolean Debug Mode	boolean	Enables debugging mode.	Default: false	Range: —
`syncLocalPassword`boolean Sync Local Password	boolean	Enables Active Directory to local account password sync. This only works if the user is logged into their Mac with a local account.	Default: —	Range: —
`pwReqComplexity`boolean Password Required Complexity	boolean	Tells Enterprise Connect that passwords should meet Active Directory's definition of complexity. Used to enable and configure live password testing.	Default: false	Range: —
`pwReqComplexityDisableUnicode`boolean Password Required Complexity Disable Unicode	boolean	Disables the "Has a Unicode character" password test from live password testing.	Default: false	Range: —
`pwReqLength`integer Password Required Length	integer	Require passwords to be at least as long as the specified value.	Default: —	Range: —
`pwReqText`string Password Change Message Path	string	Path to a RTF file to display for the user during password changes.	Default: —	Range: —
`pwReqHistoryCount`integer Password History Count	integer	How many previous passwords cannot be re-used.	Default: —	Range: —
`pwReqMinimumPasswordAge`integer Password Minimum Age	integer	The minimum age of passwords before they can be changed.	Default: —	Range: —
`disablePasswordFunctions`boolean Disable Password Functions	boolean	Disable Enterprise Connect's password management abilities, including expiration notices and the "Change Password" menu item. This is useful for customers who don't change their passwords in AD.	Default: false	Range: —
`disablePasswordExpirationChecking`boolean Disable Password Expiration Checking	boolean	Disable Enterprise Connect's password expiration checking, but still leave intact the ability for the user to change their password with Enterprise Connect.	Default: —	Range: —
`runPasswordChangeScriptOnLocalPasswordSync`boolean Run Password Change Script On Local Password Sync	boolean	Determines if Enterprise Connect should run the password change script upon a local password sync.	Default: true	Range: —
`passwordChangeScriptPath`string Password Change Script Path	string	Path to the password change script.	Default: —	Range: —
`passwordChangeURL`string Password Change URL	string	URL to open in the user's default web browser when they use Enterprise Connect to change their password. Standard password change functionality will no longer work.	Default: —	Range: —
`passwordExpireOverride`integer Password Expire Override	integer	Override domain password policy when calculating password expiration.	Default: —	Range: —
`passwordNotificationDays`integer Password Expire Notification	integer	Determines the amount of days before password expiration that the user receives expiration notifications.	Default: 15	Range: —
`checkForNetworkType`boolean Check For Network Server	boolean	Check for a host in your organization's network.	Default: false	Range: —
`checkForNetworkServer`string Network Server	string	The host Enterprise Connect should check for when connecting. Depends on: checkForNetworkType ∈ [true]	Default: —	Range: —
`connectDelay`integer Connect Delay	integer	Delay starting the connection process when your organization's network is detected. This may be useful for customers who use Cisco NAC and need to delay connection while host checks are performed.	Default: 0	Range: —
`connectionCompletedScriptPath`string Connection Completed Script Path	string	Path to the connection completed script.	Default: —	Range: —
`connectReminderNagInterval`integer Connection Reminder Interval	integer	The interval, in seconds, between connection reminders.	Default: 86400	Range: —
`dailyReconnectTime`integer Daily Reconnect Time	integer	The interval, in seconds, that Enterprise Connect should attempt its daily reconnect. Set this to 0 to disable the daily reconnect.	Default: 86400	Range: —
`runAuditScript`boolean Run Audit Script	boolean	Tells Enterprise Connect to execute an audit script.	Default: —	Range: —
`runAuditScriptPath`string Audit Script Path	string	Path to the audit script.	Default: —	Range: —
`mountNetworkHomeDirectory`boolean Mount Network Home Directory	boolean	Determines if Enterprise Connect mounts the user's network home directory.	Default: —	Range: —
`pfc_preventUserShares`boolean Prevent User Shares	boolean	Prevents the user from adding custom shares to Enterprise Connect.	Default: —	Range: —
`shares`array Shares	array	List of shares that Enterprise Connect should attempt to mount. Depends on: pfc_preventUserShares ∈ [true]	Default: [{}]	Range: —
`managedshare`dict Share	dict	—	Default: —	Range: —
`path`string Path	string	—	Default: —	Range: —
`managedshares`array Managed Shares	array	List of shares that Enterprise Connect should attempt to mount. Users will still be able to add their own shares.	Default: —	Range: —
`managedshare`dict Share	dict	—	Default: —	Range: —
`path`string Path	string	—	Default: —	Range: —
`shareMountWaitSeconds`integer Share Mount Delay	integer	Delay the mounting of network shares when your organization's network is detected. This may be useful for customers who use Cisco NAC and need to delay connection while host checks are performed.	Default: 0	Range: —
`smartCardMode`boolean Enable Smart Card Mode	boolean	Determines whether smart card mode should be enabled.	Default: false	Range: —
`showUsernameWithSmartcard`boolean Show Username in Smart Card Mode	boolean	Determines if Enterprise Connect should display the username field if smart card mode is enabled.	Default: false	Range: —
`destroyKerbTicketUponCardRemoval`boolean Destroy Kerberos Ticket on Smart Card Removal	boolean	—	Default: true	Range: —