You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: content/manuals/security/for-admins/hardened-desktop/settings-management/_index.md
+13-21Lines changed: 13 additions & 21 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,15 +9,13 @@ aliases:
9
9
weight: 10
10
10
---
11
11
12
-
>**Note**
12
+
>[!NOTE]
13
13
>
14
-
>Settings Management is available to Docker Business customers only.
14
+
>Settings Management is available to Docker Business customers only.
15
15
16
-
Settings Management is a feature that helps admins to control certain Docker Desktop settingson client machines within their organization.
16
+
Settings Management helps you control key Docker Desktop settings, like proxies and network configurations, on your developer's machines within your organization.
17
17
18
-
With a few lines of JSON, admins can configure controls for Docker Desktop settings such as proxies and network settings. For an extra layer of security, admins can also use Settings Management to enable and lock in [Enhanced Container Isolation](../enhanced-container-isolation/_index.md) which ensures that any configurations set with Settings Management cannot be modified by containers.
19
-
20
-
It is available with [Docker Desktop 4.13.0 and later](/manuals/desktop/release-notes.md).
18
+
For an extra layer of security, you can also use Settings Management to enable and lock in [Enhanced Container Isolation](../enhanced-container-isolation/_index.md) which ensures that any configurations set with Settings Management cannot be modified by containers.
21
19
22
20
### Who is it for?
23
21
@@ -27,13 +25,13 @@ It is available with [Docker Desktop 4.13.0 and later](/manuals/desktop/release-
27
25
28
26
### How does it work?
29
27
30
-
Administrators can configure several Docker Desktop settings using an `admin-settings.json` file. This file is located on the Docker Desktop host and can only be accessed by developers with root or admin privileges.
28
+
You can configure several Docker Desktop settings using an `admin-settings.json` file. This file is located on the Docker Desktop host and can only be accessed by developers with root or administrator privileges.
31
29
32
30
Values that are set to `locked: true` within the `admin-settings.json` override any previous values set by developers and ensure that these cannot be modified. For more information, see [Configure Settings Management](configure.md#step-two-configure-the-settings-you-want-to-lock-in).
33
31
34
32
### What features can I configure with Settings Management?
35
33
36
-
Using the `admin-settings.json` file, admins can:
34
+
Using the `admin-settings.json` file, you can:
37
35
38
36
- Turn on and lock in [Enhanced Container Isolation](../enhanced-container-isolation/_index.md)
39
37
- Configure HTTP proxies
@@ -50,33 +48,27 @@ Using the `admin-settings.json` file, admins can:
50
48
- Control whether developers can use the Docker terminal
51
49
- Control the file sharing implementation for your developers on macOS
52
50
- Specify which paths your developers can add file shares to
53
-
- Configure Air-Gapped Containers
51
+
- Configure Air-gapped containers
54
52
55
-
For more details on the syntax and options admins can set, see [Configure Settings Management](configure.md).
53
+
For more details on the syntax and options, see [Configure Settings Management](configure.md).
56
54
57
55
### How do I set up and enforce Settings Management?
58
56
59
-
As an administrator, you first need to [enforce
60
-
sign-in](/manuals/security/for-admins/enforce-sign-in/_index.md). This is
61
-
because the Settings Management feature requires a Docker Business subscription
62
-
and therefore your Docker Desktop developers must authenticate to your
63
-
organization. Enforcing sign-in ensures that your Docker Desktop developers
64
-
always authenticate to your organization, even though they can authenticate
65
-
without it and the feature will take effect. Enforcing sign-in guarantees the
66
-
feature always takes effect.
67
-
57
+
You first need to [enforce sign-in](/manuals/security/for-admins/enforce-sign-in/_index.md) to ensure that all Docker Desktop developers authenticate with your organization. Since the Settings Management feature requires a Docker Business subscription, enforced sign-in guarantees that only authenticated users have access and that the feature consistently takes effect across all users, even though it may still work without enforced sign-in.
68
58
69
59
Next, you must either manually [create and configure the admin-settings.json file](configure.md), or use the `--admin-settings` installer flag on [macOS](/manuals/desktop/setup/install/mac-install.md#install-from-the-command-line) or [Windows](/manuals/desktop/setup/install/windows-install.md#install-from-the-command-line) to automatically create the `admin-settings.json` and save it in the correct location.
70
60
71
61
Once this is done, Docker Desktop developers receive the changed settings when they either:
72
62
- Quit, re-launch, and sign in to Docker Desktop
73
63
- Launch and sign in to Docker Desktop for the first time
74
64
75
-
Docker doesn't automatically mandate that developers re-launch and re-authenticate once a change has been made, so as not to disrupt your developers' workflow.
65
+
So as not to disrupt your developers' workflow, Docker doesn't automatically mandate that developers re-launch and re-authenticate once a change has been made.
76
66
77
67
### What do developers see when the settings are enforced?
78
68
79
-
Any settings that are enforced, are grayed out in Docker Desktop and the user is unable to edit them, either via the Docker Desktop UI, CLI, or the `settings-store.json` file (or `settings.json` for Docker Desktop versions 4.34 and earlier). In addition, if Enhanced Container Isolation is enforced, developers can't use privileged containers or similar techniques to modify enforced settings within the Docker Desktop Linux VM, for example, reconfigure proxy and networking of reconfigure Docker Engine.
69
+
Enforced settings in Docker Desktop appear grayed out, making them uneditable through the Docker Desktop Dashboard, CLI, or the `settings-store.json` file (or `settings.json` for Docker Desktop versions 4.34 and earlier).
70
+
71
+
In addition, if Enhanced Container Isolation is enforced, developers can't use privileged containers or similar techniques to modify enforced settings within the Docker Desktop Linux VM, for example, reconfigure proxy and networking of reconfigure Docker Engine.
0 commit comments