Well just to clarify we are doing our host checking at the role level, not the realm level. In the Host Checker section I configured a HC Policy called MAC Check. The purpose of this is to ensure it is a user with a Mac OS trying to connect and a Windows user. What this policy does is checks for the existence of a process called launchd.
Then I duplicated some of our existing roles that these Mac users required and removed our standard HC policy (checks for antivirus) and added this Mac check policy, meaning only Mac users can access this role.
Then I created a new realm just for the Mac users eg. https://xyz.com/mac and created role mappings to these new 'Mac' roles I created. I created a hyperlink on the login screen of our main realm indicating if you are a Mac user then click here, to take them to the Mac realm.
This may not be the most efficient way of doing it but it seems to work for us. Hope this helps.
Message Edited by meh on 03-22-2009 03:55 PM
