Managing Mac policies using Workgroup Manager and Active Directory
TweetFollow Us on Twitter

Managing Mac policies using Workgroup Manager and Active Directory

There is. The Mac Workgroup Manager is a powerful tool to centrally manage users and computers across your organization. It lets you specify standard configuration information that applies to particular computers or users. It is also easily extendable by ISVs to support application-specific settings. Moreover, Apple has done a great job of keeping it up-to-date with OS releases.

Unfortunately, unless you’re running Mac OS X Server, it’s unlikely that you’re using it to manage the Macs in your company. Without OS X server it’s possible that you might not have even heard of Workgroup Manager.

Mac Workgroup Manager requires a central place to store its settings. It can store settings in Mac OS X server or in any LDAP server. At many companies, the main LDAP server is Microsoft’s Active Directory (AD) server. Organizations that run Windows computers in significant numbers likely use AD to authenticate Windows users. Unfortunately, storing data in that LDAP server is not trivial. The prescribed way of storing Workgroup Manager data in AD requires schema changes to the directory.

Many organizations are reluctant to make schema changes for any reason and unlikely to want to make them for reasons particular to the Mac. At many companies, Active Directory is administered by Windows-folk who may know little about Macs and who may be disinclined to make changes to AD to adapt it for the Mac. Schema changes are virtually un-doable. Once made, reversing them is difficult.

Convincing an organization to deploy Mac OS X servers solely to support Mac Workgroup manager may also be difficult if your company uses Macs only as desktops or laptop computers.

Integrating Workgroup Manager and Active Directory

Apple and other vendors supply software to integrate Macs with AD. The Apple Active Directory Plug-In allows Macs to authenticate users with AD. Other vendors supply similar functionality as well as providing “group policy” features that provide functionality similar to that of Mac Workgroup Manager. Likewise Software, however, provides authentication functionality and the ability to integrate Workgroup Manager with AD group policy. Let’s see how this works.

First, the Likewise Enterprise product, integrates user authentication with Active Directory in a fashion similar to that of the Mac Active Directory Plug-In. Users can log into their Macs using the same username and password that they use on Windows computers. Second, Likewise provides a mechanism that allows Workgroup Manager settings to be stored in AD Group Policy Objects (GPOs).

Group policy is the Microsoft mechanism for centralized configuration of user and computer settings. Group policy objects are stored in Active Directory and polled by Microsoft Windows computers that detect and apply policy changes as necessary. In AD, GPOs are associated with organizational units (OUs) and GPO settings are applied to the computers and users that are contained in those units.

In Figure 1, an OU called Marketing has been defined. Two computers have been added, or joined, to the OU and two users have been created in the OU. Any GPOs associated with the Marketing OU will be applied to the two computers and the two users in the OU.

Likewise Enterprise contains a utility to join Macs (and other non-Windows computers) to Active Directory. Once a computer is joined to AD, it can participate in AD-based user authentication and in group policy processing. In figure 1, this utility has been used to join Mary Smith’s Mac to the Marketing OU.

image

Part 2 continued >>

 
AAPL
$132.54
Apple Inc.
+2.26
GOOG
$554.40
Google Inc.
-10.66
MSFT
$47.92
Microsoft Corporation
+0.05
MacNews Search:
Community Search:
view counter

view counter
view counter
view counter
view counter
view counter
view counter

Discover Your Reflexes With Minimalist G...
Discover O, BYOF Studios, may look simple at first with its' color matching premise and swipe controls, but as you speed up the task becomes more daunting. [Read more] | Read more »
Here's Another Roundup of Notable A...
Now that the Apple Watch is publically available (kind of), even more apps and games have been popping up for it. Some of them are updates to existing software, others are brand new. The main thing is that they're all for the Apple Watch, and if you're looking to expand the wearable's library then we've got a list for you. Our previous list is... | Read more »
Use Batting Average and the Apple Watch...
Batting Average, by Pixolini, is designed to help you manage your statistics. Every time you go to bat, you can use your Apple Watch to track  your swings, strikes, and hits. [Read more] | Read more »
Celebrate Studio Pango's 3rd Annive...
It is time to party, Pangoland pals! Studio Pango is celebrating their 3rd birthday and their gift to you is a new update to Pangoland. [Read more] | Read more »
Become the World's Most Important D...
Must Deliver, by cherrypick games, is a top-down endless-runner witha healthy dose of the living dead. [Read more] | Read more »
SoundHound + LiveLyrics is Making its De...
SoundHound Inc. has announced that SoundHound + LiveLyrics, will be one of the first third-party apps to hit the Apple Watch. With  SoundHound you'll be able to tap on your watch and have the app recognize the music you are listening to, then have the lyrics scroll across the screen in time with the song. As you listen to more music the app will... | Read more »
Adobe Joins the Apple Watch Lineup With...
A whole tidal wave of apps are headed for the Apple Watch, and Adobe has joined in with 3 new ways to enhance your creativity and collaborate with others. The watch apps pair with iPad/iPhone apps to give you total control over your Adobe projects. [Read more] | Read more »
Z Steel Soldiers, Sequel to Kavcom'...
Kavcom has released Z Steel Soldiers, which continues the story of the comedic RTS originally created by the Bitmap Brothers. [Read more] | Read more »
Seene Lets You Create 3D Images With You...
Seene, by Obvious Engineering, is a 3D capture app that's meant to allow you to create visually stunning 3D images with a tap of your finger, and then share them as a 3D photo, video or gif. [Read more] | Read more »
Lost Within - Tips, Tricks, and Strategi...
Have you just downloaded Lost Within and are you in need of a guiding hand? While it’s not the toughest of games out there you might still want some helpful tips to get you started. [Read more] | Read more »
All contents are Copyright 1984-2010 by Xplain Corporation. All rights reserved. Theme designed by Icreon.