Managing Mac policies using Workgroup Manager and Active Directory
TweetFollow Us on Twitter

Managing Mac policies using Workgroup Manager and Active Directory

There is. The Mac Workgroup Manager is a powerful tool to centrally manage users and computers across your organization. It lets you specify standard configuration information that applies to particular computers or users. It is also easily extendable by ISVs to support application-specific settings. Moreover, Apple has done a great job of keeping it up-to-date with OS releases.

Unfortunately, unless you’re running Mac OS X Server, it’s unlikely that you’re using it to manage the Macs in your company. Without OS X server it’s possible that you might not have even heard of Workgroup Manager.

Mac Workgroup Manager requires a central place to store its settings. It can store settings in Mac OS X server or in any LDAP server. At many companies, the main LDAP server is Microsoft’s Active Directory (AD) server. Organizations that run Windows computers in significant numbers likely use AD to authenticate Windows users. Unfortunately, storing data in that LDAP server is not trivial. The prescribed way of storing Workgroup Manager data in AD requires schema changes to the directory.

Many organizations are reluctant to make schema changes for any reason and unlikely to want to make them for reasons particular to the Mac. At many companies, Active Directory is administered by Windows-folk who may know little about Macs and who may be disinclined to make changes to AD to adapt it for the Mac. Schema changes are virtually un-doable. Once made, reversing them is difficult.

Convincing an organization to deploy Mac OS X servers solely to support Mac Workgroup manager may also be difficult if your company uses Macs only as desktops or laptop computers.

Integrating Workgroup Manager and Active Directory

Apple and other vendors supply software to integrate Macs with AD. The Apple Active Directory Plug-In allows Macs to authenticate users with AD. Other vendors supply similar functionality as well as providing “group policy” features that provide functionality similar to that of Mac Workgroup Manager. Likewise Software, however, provides authentication functionality and the ability to integrate Workgroup Manager with AD group policy. Let’s see how this works.

First, the Likewise Enterprise product, integrates user authentication with Active Directory in a fashion similar to that of the Mac Active Directory Plug-In. Users can log into their Macs using the same username and password that they use on Windows computers. Second, Likewise provides a mechanism that allows Workgroup Manager settings to be stored in AD Group Policy Objects (GPOs).

Group policy is the Microsoft mechanism for centralized configuration of user and computer settings. Group policy objects are stored in Active Directory and polled by Microsoft Windows computers that detect and apply policy changes as necessary. In AD, GPOs are associated with organizational units (OUs) and GPO settings are applied to the computers and users that are contained in those units.

In Figure 1, an OU called Marketing has been defined. Two computers have been added, or joined, to the OU and two users have been created in the OU. Any GPOs associated with the Marketing OU will be applied to the two computers and the two users in the OU.

Likewise Enterprise contains a utility to join Macs (and other non-Windows computers) to Active Directory. Once a computer is joined to AD, it can participate in AD-based user authentication and in group policy processing. In figure 1, this utility has been used to join Mary Smith’s Mac to the Marketing OU.

image

Part 2 continued >>

 
AAPL
$112.94
Apple Inc.
+1.16
GOOG
$524.87
Google Inc.
+8.52
MSFT
$47.98
Microsoft Corpora
+0.32
MacNews Search:
Community Search:

Latest Forum Discussions

See All
view counter

view counter
view counter
view counter
view counter
view counter
view counter

This Week at 148Apps: December 15-19, 20...
Happy Holidays from 148Apps!   How do you know what apps are worth your time and money? Just look to the review team at 148Apps. We sort through the chaos and find the apps you’re looking for. The ones we love become Editor’s Choice, standing out above the many good apps and games with something just a little bit more to offer. Take a look at what... | Read more »
New Version of Tempo Smart Calendar Help...
New Version of Tempo Smart Calendar Helps You Plan Your Day Without Opening the App Posted by Jessica Fisher on December 22nd, 2014 [ permalink ] | Read more »
Sparkle - Advanced Cross-Synthesis (Mus...
Sparkle - Advanced Cross-Synthesis 1.0 Device: iOS Universal Category: Music Price: $6.99, Version: 1.0 (iTunes) Description: Sparkle is a tool for advanced spectral hybridizations made of several algorithms that operate on frequency domain. By means of envelope preservation and phase-sync processing it can creates high-quality... | Read more »
DICETINY is coming to iOS in 2015
DICETINY is coming to iOS in 2015 Posted by Jessica Fisher on December 22nd, 2014 [ permalink ] Fakedice has announced that they’re bringing their digital board game DICETINY to iOS. | Read more »
It Came From Canada: The Witcher Battle...
The Witcher 3: Wild Hunt may still be a few months away, but very soon players will be able to get a new taste of the acclaimed Polish RPG on their mobile devices with The Witcher Battle Arena. While it trades open-world exploration for compact multiplayer brawls, we see how much of that old Witcher charm remains in this edition of It Came From... | Read more »
The Babies Get Lost Again in the New Azt...
The Babies Get Lost Again in the New Aztec Ruins Update for Light in the Dark Posted by Jessica Fisher on December 22nd, 2014 [ permalink ] | Read more »
Living Room 3D for IKEA Makes All In-App...
Living Room 3D for IKEA Makes All In-App Purchases Free Until 2015 Posted by Jessica Fisher on December 22nd, 2014 [ permalink ] | Read more »
Crossbow Warrior – The Legend of William...
Crossbow Warrior – The Legend of William Tell Review By Lee Hamlet on December 22nd, 2014 Our Rating: :: MISSES THE MARKUniversal App - Designed for iPhone and iPad Crossbow Warrior details the entertaining adventures of legendary bowman William Tell. Unfortunately, the gameplay can’t live up to the legend. | Read more »
A New Update Races onto Asphalt 8: Airbo...
A New Update Races onto Asphalt 8: Airborne Posted by Jessica Fisher on December 22nd, 2014 [ permalink ] Universal App - Designed for iPhone and iPad | Read more »
Workflow: Powerful Automation Made Simpl...
Workflow: Powerful Automation Made Simple Review By Campbell Bird on December 22nd, 2014 Our Rating: :: GO WITH THE FLOWUniversal App - Designed for iPhone and iPad This powerful app lets users accomplish multiple tasks at touch of a button in a way that is more visual than some of the competition. | Read more »
All contents are Copyright 1984-2010 by Xplain Corporation. All rights reserved. Theme designed by Icreon.