Network Share Mounter
de.fau.rrze.NetworkShareMounter
Network Share Mounter settings
Configuration Keys (33)
Showing 33 of 33 keys
| Key | Type | Description | Default | Range |
|---|---|---|---|---|
managedNetworkSharesarrayManaged network shares | array | Array with managed network shares that are centrally deployed to users. | Default: — | Range: — |
| dict | — | Default: — | Range: — | |
| string | The share URL, e.g. smb://fileserver.example.com/share. Note: %USERNAME% is replaced at runtime with the user's macOS login name. | Default: — | Range: — | |
| string | Authentication method: krb (Kerberos/SSO), pwd (username + password), or guest. Default: krb. | Default: "krb" | Range: Kerberos (krb), Password (pwd), Guest (guest) | |
usernamestringUsername (Optional) | string | Pre-defines a username for pwd-type shares. If omitted, the user is prompted. | Default: — | Range: — |
mountPointstringMount point name (Optional) | string | Overrides the local directory name used as the mount point. Only relevant when the mount location is not /Volumes. Leave blank to use the share name (recommended). | Default: — | Range: — |
Externally managed Kerberos tickets | string | Set to true if Kerberos tickets for this share are managed externally (AD binding, Jamf Connect, Apple SSO Extension). NSM will mount the share without interfering with ticket management and will not prompt for a Kerberos profile. Only relevant for authType: krb. | Default: "false" | Range: Yes (true), No (false) |
kerberosRealmstringPer-share Kerberos realm (Optional) | string | Per-share Kerberos realm override. Used together with externalKerberosManagement to identify which external profile to assign. Defaults to the global kerberosRealm setting. | Default: — | Range: — |
autoMountstringAutomatically mount | string | true (default): the share is mounted automatically at startup and on network changes. false: the share appears in the menu but is never mounted automatically - the user can mount it on demand. | Default: "true" | Range: Yes (true), No (false) |
kerberosRealmstringKerberos Realm | string | Kerberos/AD domain for user authentication (e.g. EXAMPLE.COM). When set, NSM manages Kerberos ticket acquisition and renewal automatically. Required for app-managed Kerberos SSO. | Default: "" | Range: — |
Kerberos Profile Display Name | string | Friendly display name for the Kerberos authentication profile shown in the app's Settings. If not set, the realm name (e.g. EXAMPLE.COM) is used as-is. | Default: — | Range: — |
usernameOverridestringUsername Override | string | Overrides the %USERNAME% variable used in share paths. Use this when the local macOS login name differs from the AD or network username. | Default: — | Range: — |
singleUserModebooleanSingle User Mode | boolean | If true, automatic Kerberos sign-in and ticket renewal only process the default account. If false, all configured accounts are processed. | Default: false | Range: — |
ExpirationCountdownStartDayintegerPassword Expiration Countdown Start Day | integer | Passive warning. Days before password expiry when a silent countdown item first appears in the menu bar. The user only sees it when they open the menu. Set to 0 to disable all password expiration features entirely. Mirrors the Apple Kerberos SSO Extension key of the same name. | Default: 14 | Range: — |
Password Expiration Notification Start Day | integer | Active warning. Days before password expiry when an alert dialog is shown automatically, once per calendar day. Set this lower than ExpirationCountdownStartDay so the dialog only interrupts when expiry is genuinely imminent. Mirrors the Jamf Connect / Apple Kerberos SSO Extension key of the same name. | Default: 14 | Range: — |
passwordChangeURLstringPassword Change URL | string | URL of a web-based password self-service portal (SSPR). If set, a Change Password button in the expiration dialog opens this URL in the default browser. If not set, the user can change their password directly within NSM (requires kerberosRealm). | Default: — | Range: — |
allowPasswordChangebooleanAllow Password Change | boolean | When true, a permanent Change Password... item is shown in the menu bar at all times, even before the expiry threshold is reached. It automatically transforms into the expiry countdown when the threshold is reached. If passwordChangeURL is also set, clicking the item opens that URL instead of the in-app dialog. Mirrors the Apple Kerberos SSO Extension key of the same name. | Default: false | Range: — |
autostartbooleanEnable Autostart | boolean | When deployed as a locked MDM key, the value is enforced on every app launch. When deployed as an unlocked default, it is applied once on the first launch only - after that, the user retains control. | Default: false | Range: — |
canChangeAutostartbooleanCan Change Autostart | boolean | Controls only the autostart toggle in the app's Settings UI. Set to false to grey it out. Does not affect MDM enforcement. To enforce the autostart state on every launch, deploy autostart as a locked key instead. | Default: true | Range: — |
canQuitbooleanAllow to Quit App | boolean | When true, the user can quit the app via the menu bar. Set to false to remove the Quit item entirely. | Default: true | Range: — |
unmountOnExitbooleanUnmount Shares on Exit | boolean | When true, all managed shares are automatically unmounted when the app quits. | Default: true | Range: — |
locationstringMount path | string | Path where network shares are mounted. The default is a localized folder in the user's home directory (e.g. ~/Network Shares). It is strongly recommended to leave this empty and use the default - changing it can break Finder integration. | Default: "" | Range: — |
useNewDefaultLocationbooleanUse the new default mount location | boolean | If true, shares are mounted under /Volumes by default instead of the legacy per-user location. Ignored if 'location' is set. | Default: false | Range: — |
useLocalizedMountDirectoriesbooleanUse Localized Mount Folder Name | boolean | If false, always uses the English folder name 'Networkshares' for the legacy default mount path instead of a name localized to the user's language. Only relevant when 'useNewDefaultLocation' is false. | Default: true | Range: — |
cleanupLocationDirectorybooleanClean up obstructing files and directories | boolean | When true, NSM removes files and empty directories from the mount location that would prevent a share from mounting. Read the documentation carefully before enabling - this modifies the user's file system. | Default: false | Range: — |
helpURLstringHelp URL | string | URL to your organization's internal helpdesk or IT documentation. When set, an About Network Share Mounter item appears in the menu bar, opening this URL in the default browser. | Default: "" | Range: — |
menuConnectSharesstringMenu Item: Connect Shares | string | Controls the "Mount shares" action. Set to hidden to remove the item completely, or disabled to grey it out without removing it. Leave unconfigured to show it normally. | Default: — | Range: Hidden (hidden), Disabled (disabled) |
menuDisconnectSharesstringMenu Item: Disconnect Shares | string | Controls the "Unmount shares" action. Set to hidden to remove the item completely, or disabled to grey it out without removing it. Leave unconfigured to show it normally. | Default: — | Range: Hidden (hidden), Disabled (disabled) |
menuShowSharesMountDirstringMenu Item: Show Shares Mount Directory | string | Controls "Show mounted shares" (opens the mount folder in Finder). Set to hidden to remove the item completely, or disabled to grey it out without removing it. Leave unconfigured to show it normally. | Default: — | Range: Hidden (hidden), Disabled (disabled) |
menuShowSharesstringMenu Item: Show Shares List | string | Controls the individual share items listed in the menu. Set to hidden to remove them completely, or disabled to grey them out without removing them. Leave unconfigured to show them normally. | Default: — | Range: Hidden (hidden), Disabled (disabled) |
menuSettingsstringMenu Item: Settings | string | Controls the "Preferences..." item. Set to hidden to remove the item completely, or disabled to grey it out without removing it. Leave unconfigured to show it normally. | Default: — | Range: Hidden (hidden), Disabled (disabled) |
menuCheckUpdatesstringMenu Item: Check for Updates | string | Controls the "Check for Updates..." item. Set to hidden to remove the item completely, or disabled to grey it out without removing it. Leave unconfigured to show it normally. | Default: — | Range: Hidden (hidden), Disabled (disabled) |
menuAboutstringMenu Item: About | string | Controls the "About Network Share Mounter" item (only visible when helpURL is set). Set to hidden to remove the item completely, or disabled to grey it out without removing it. Leave unconfigured to show it normally. | Default: — | Range: Hidden (hidden), Disabled (disabled) |
menuQuitstringMenu Item: Quit | string | Controls the "Quit Network Share Mounter" item. Set to hidden to remove the item completely, or disabled to grey it out without removing it. Leave unconfigured to show it normally. | Default: — | Range: Hidden (hidden), Disabled (disabled) |
disableAutoUpdateFrameworkbooleanDisable Auto Update Framework | boolean | Master switch. Set to true to completely disable the Sparkle update framework. When disabled, no update checks occur and the Check for Updates menu item is removed. | Default: false | Range: — |
SUEnableAutomaticChecksbooleanEnable Automatic Update Checks | boolean | When the framework is enabled, controls whether NSM actively checks for new versions in the background. Set to false to suppress checks while keeping the framework loaded. | Default: true | Range: — |
SUAutomaticallyUpdatebooleanAutomatically Install Updates | boolean | When true, updates are downloaded and installed automatically without asking the user for confirmation. Only takes effect when SUEnableAutomaticChecks is also true. | Default: true | Range: — |
sendDiagnosticsbooleanSend Diagnostic Data | boolean | If true, diagnostic and crash data is sent to help improve the app. Independent of 'disableDiagnostics', which only hides the section in Settings. | Default: true | Range: — |
disableDiagnosticsbooleanDisable Diagnostics | boolean | When true, hides the hidden "Diagnostics" trigger in Settings and General (five consecutive clicks) that lets users send NSM's unified-log activity to the developers for troubleshooting. Use this to prevent users from sending diagnostic data off-device, e.g. for data-privacy reasons. | Default: false | Range: — |
enableAutoUpdaterbooleanEnable AutoUpdater Framework | boolean | Deprecated since version 4. Use 'disableAutoUpdateFramework' instead (inverted logic: enableAutoUpdater = true equals disableAutoUpdateFramework = false). | Default: true | Range: — |
networkSharesarrayNetwork shares (deprecated, legacy) | array | Legacy array with all network shares. Example: smb://filer.your.domain/share. Note: %USERNAME% will be replaced with the login name of the current user. Still accepted for backward compatibility but should not be used in new profiles - use managedNetworkShares instead. | Default: — | Range: — |
| string | — | Default: — | Range: — |