How to configure Managed Domains for macOS devices?

This document explains the process of configuring Managed Domains on macOS devices using Hexnode.

With the Managed Domains policy, Hexnode offers two configurations. Unmarked Email Domains involve listing specific email domains as managed. If an email is sent to a domain from the device end that is not listed by the IT admin, then it will be highlighted as out-of-domain in the Mail app. Through Cross-Site Tracking Prevention Relaxed Domains, organizations can leave cross-site tracking prevention enabled for general browsing while selectively relaxing it for up to 10 domains, allowing them to use cookies. This feature is useful in organizations where instructional videos or e-learning courses offered by third parties are used by providing the ability to utilize cookies for those relaxed domains.

Configure Managed Domains settings

1. Login to your Hexnode portal.
2. Navigate to Policies.
3. Select an existing policy or create a new one by clicking on New Policy.
4. Go to macOS > Security > Managed Domain and click on Configure.

You have the following options to be configured.

Unmarked Email Domains – This configuration allows IT admins to list the email domains that need to be allowed for their organization. If the end user emails anyone not listed in the Unmarked Email Domains, that address would be marked, so users would know that the domain was not on the approved list.

Out-of-domain mail will be highlighted in the mail app as shown below.

Cross-Site Tracking Prevention Relaxed Domains – Admins can relax the cross-site tracking prevention for up to 10 domains by adding them to a designated list.

For instance, consider a scenario where a project management tool is utilised within the organization. However, the browser’s privacy settings block cookies, leading users to repeatedly log in. By adding the tool’s website to the Cross-Site Tracking Prevention Relaxed Domains list, this feature lets the tool use its cookies, so the user can stay logged in and keep working without having to log in repeatedly.

Associate Policies with Devices / Groups.

If the policy has not yet been saved.

1. Navigate to Policy Targets.
2. Click on +Add Devices.
3. Select the devices and click OK.
4. Click on Save to apply the policies to devices.

Apart from devices, you can also associate the policies with device groups, user and user groups from ‘Policy Targets’.

If the policy has been saved, you can associate it with another method.

1. From ‘Policies’, check the policies to be associated.
2. Click on Manage → Associate Targets and select the device.
3. Click on Associate to apply policy to the devices.

Here, once the policies have been applied, the managed domains will be configured on your macOS devices.