Skip to content

Commit 9d67727

Browse files
committed
ENGDOCS-2305
1 parent d4c7e4a commit 9d67727

File tree

3 files changed

+116
-86
lines changed

3 files changed

+116
-86
lines changed

_vale/Docker/Acronyms.yml

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -31,6 +31,7 @@ exceptions:
3131
- DPI
3232
- DSOS
3333
- DVP
34+
- ECI
3435
- ELK
3536
- FAQ
3637
- FUSE
@@ -67,6 +68,7 @@ exceptions:
6768
- NTLM
6869
- NVDA
6970
- OCI
71+
- OS
7072
- OSS
7173
- PATH
7274
- PDF

content/manuals/security/for-admins/hardened-desktop/settings-management/_index.md

Lines changed: 13 additions & 21 deletions
Original file line numberDiff line numberDiff line change
@@ -9,15 +9,13 @@ aliases:
99
weight: 10
1010
---
1111

12-
>**Note**
12+
> [!NOTE]
1313
>
14-
>Settings Management is available to Docker Business customers only.
14+
> Settings Management is available to Docker Business customers only.
1515
16-
Settings Management is a feature that helps admins to control certain Docker Desktop settings on client machines within their organization.
16+
Settings Management helps you control key Docker Desktop settings, like proxies and network configurations, on your developer's machines within your organization.
1717

18-
With a few lines of JSON, admins can configure controls for Docker Desktop settings such as proxies and network settings. For an extra layer of security, admins can also use Settings Management to enable and lock in [Enhanced Container Isolation](../enhanced-container-isolation/_index.md) which ensures that any configurations set with Settings Management cannot be modified by containers.
19-
20-
It is available with [Docker Desktop 4.13.0 and later](/manuals/desktop/release-notes.md).
18+
For an extra layer of security, you can also use Settings Management to enable and lock in [Enhanced Container Isolation](../enhanced-container-isolation/_index.md) which ensures that any configurations set with Settings Management cannot be modified by containers.
2119

2220
### Who is it for?
2321

@@ -27,13 +25,13 @@ It is available with [Docker Desktop 4.13.0 and later](/manuals/desktop/release-
2725

2826
### How does it work?
2927

30-
Administrators can configure several Docker Desktop settings using an `admin-settings.json` file. This file is located on the Docker Desktop host and can only be accessed by developers with root or admin privileges.
28+
You can configure several Docker Desktop settings using an `admin-settings.json` file. This file is located on the Docker Desktop host and can only be accessed by developers with root or administrator privileges.
3129

3230
Values that are set to `locked: true` within the `admin-settings.json` override any previous values set by developers and ensure that these cannot be modified. For more information, see [Configure Settings Management](configure.md#step-two-configure-the-settings-you-want-to-lock-in).
3331

3432
### What features can I configure with Settings Management?
3533

36-
Using the `admin-settings.json` file, admins can:
34+
Using the `admin-settings.json` file, you can:
3735

3836
- Turn on and lock in [Enhanced Container Isolation](../enhanced-container-isolation/_index.md)
3937
- Configure HTTP proxies
@@ -50,33 +48,27 @@ Using the `admin-settings.json` file, admins can:
5048
- Control whether developers can use the Docker terminal
5149
- Control the file sharing implementation for your developers on macOS
5250
- Specify which paths your developers can add file shares to
53-
- Configure Air-Gapped Containers
51+
- Configure Air-gapped containers
5452

55-
For more details on the syntax and options admins can set, see [Configure Settings Management](configure.md).
53+
For more details on the syntax and options, see [Configure Settings Management](configure.md).
5654

5755
### How do I set up and enforce Settings Management?
5856

59-
As an administrator, you first need to [enforce
60-
sign-in](/manuals/security/for-admins/enforce-sign-in/_index.md). This is
61-
because the Settings Management feature requires a Docker Business subscription
62-
and therefore your Docker Desktop developers must authenticate to your
63-
organization. Enforcing sign-in ensures that your Docker Desktop developers
64-
always authenticate to your organization, even though they can authenticate
65-
without it and the feature will take effect. Enforcing sign-in guarantees the
66-
feature always takes effect.
67-
57+
You first need to [enforce sign-in](/manuals/security/for-admins/enforce-sign-in/_index.md) to ensure that all Docker Desktop developers authenticate with your organization. Since the Settings Management feature requires a Docker Business subscription, enforced sign-in guarantees that only authenticated users have access and that the feature consistently takes effect across all users, even though it may still work without enforced sign-in.
6858

6959
Next, you must either manually [create and configure the admin-settings.json file](configure.md), or use the `--admin-settings` installer flag on [macOS](/manuals/desktop/setup/install/mac-install.md#install-from-the-command-line) or [Windows](/manuals/desktop/setup/install/windows-install.md#install-from-the-command-line) to automatically create the `admin-settings.json` and save it in the correct location.
7060

7161
Once this is done, Docker Desktop developers receive the changed settings when they either:
7262
- Quit, re-launch, and sign in to Docker Desktop
7363
- Launch and sign in to Docker Desktop for the first time
7464

75-
Docker doesn't automatically mandate that developers re-launch and re-authenticate once a change has been made, so as not to disrupt your developers' workflow.
65+
So as not to disrupt your developers' workflow, Docker doesn't automatically mandate that developers re-launch and re-authenticate once a change has been made.
7666

7767
### What do developers see when the settings are enforced?
7868

79-
Any settings that are enforced, are grayed out in Docker Desktop and the user is unable to edit them, either via the Docker Desktop UI, CLI, or the `settings-store.json` file (or `settings.json` for Docker Desktop versions 4.34 and earlier). In addition, if Enhanced Container Isolation is enforced, developers can't use privileged containers or similar techniques to modify enforced settings within the Docker Desktop Linux VM, for example, reconfigure proxy and networking of reconfigure Docker Engine.
69+
Enforced settings in Docker Desktop appear grayed out, making them uneditable through the Docker Desktop Dashboard, CLI, or the `settings-store.json` file (or `settings.json` for Docker Desktop versions 4.34 and earlier).
70+
71+
In addition, if Enhanced Container Isolation is enforced, developers can't use privileged containers or similar techniques to modify enforced settings within the Docker Desktop Linux VM, for example, reconfigure proxy and networking of reconfigure Docker Engine.
8072

8173
![Proxy settings grayed out](/assets/images/grayed-setting.png)
8274

0 commit comments

Comments
 (0)