Managing Mac policies using Workgroup Manager and Active Directory
TweetFollow Us on Twitter

Managing Mac policies using Workgroup Manager and Active Directory

There is. The Mac Workgroup Manager is a powerful tool to centrally manage users and computers across your organization. It lets you specify standard configuration information that applies to particular computers or users. It is also easily extendable by ISVs to support application-specific settings. Moreover, Apple has done a great job of keeping it up-to-date with OS releases.

Unfortunately, unless you’re running Mac OS X Server, it’s unlikely that you’re using it to manage the Macs in your company. Without OS X server it’s possible that you might not have even heard of Workgroup Manager.

Mac Workgroup Manager requires a central place to store its settings. It can store settings in Mac OS X server or in any LDAP server. At many companies, the main LDAP server is Microsoft’s Active Directory (AD) server. Organizations that run Windows computers in significant numbers likely use AD to authenticate Windows users. Unfortunately, storing data in that LDAP server is not trivial. The prescribed way of storing Workgroup Manager data in AD requires schema changes to the directory.

Many organizations are reluctant to make schema changes for any reason and unlikely to want to make them for reasons particular to the Mac. At many companies, Active Directory is administered by Windows-folk who may know little about Macs and who may be disinclined to make changes to AD to adapt it for the Mac. Schema changes are virtually un-doable. Once made, reversing them is difficult.

Convincing an organization to deploy Mac OS X servers solely to support Mac Workgroup manager may also be difficult if your company uses Macs only as desktops or laptop computers.

Integrating Workgroup Manager and Active Directory

Apple and other vendors supply software to integrate Macs with AD. The Apple Active Directory Plug-In allows Macs to authenticate users with AD. Other vendors supply similar functionality as well as providing “group policy” features that provide functionality similar to that of Mac Workgroup Manager. Likewise Software, however, provides authentication functionality and the ability to integrate Workgroup Manager with AD group policy. Let’s see how this works.

First, the Likewise Enterprise product, integrates user authentication with Active Directory in a fashion similar to that of the Mac Active Directory Plug-In. Users can log into their Macs using the same username and password that they use on Windows computers. Second, Likewise provides a mechanism that allows Workgroup Manager settings to be stored in AD Group Policy Objects (GPOs).

Group policy is the Microsoft mechanism for centralized configuration of user and computer settings. Group policy objects are stored in Active Directory and polled by Microsoft Windows computers that detect and apply policy changes as necessary. In AD, GPOs are associated with organizational units (OUs) and GPO settings are applied to the computers and users that are contained in those units.

In Figure 1, an OU called Marketing has been defined. Two computers have been added, or joined, to the OU and two users have been created in the OU. Any GPOs associated with the Marketing OU will be applied to the two computers and the two users in the OU.

Likewise Enterprise contains a utility to join Macs (and other non-Windows computers) to Active Directory. Once a computer is joined to AD, it can participate in AD-based user authentication and in group policy processing. In figure 1, this utility has been used to join Mary Smith’s Mac to the Marketing OU.

image

Part 2 continued >>

 
AAPL
$105.22
Apple Inc.
+0.39
GOOG
$539.78
Google Inc.
-4.20
MSFT
$46.13
Microsoft Corpora
+1.11
MacNews Search:
Community Search:

Latest Forum Discussions

See All
view counter

view counter
view counter
view counter
view counter
view counter
view counter

Rami Ismail Opens Up distribute​() for D...
Rami Ismail Opens Up distribute​() for Developers Posted by Jessica Fisher on October 24th, 2014 [ permalink ] Rami Ismail, Chief Executive of Business and Development at indie game studio | Read more »
Great Hitman GO Goes on Sale and Gets Ne...
Great Hitman GO Goes on Sale and Gets New Update – Say That Three Times Fast Posted by Jessica Fisher on October 24th, 2014 [ permalink ] | Read more »
Rival Stars Basketball Review
Rival Stars Basketball Review By Jennifer Allen on October 24th, 2014 Our Rating: :: RESTRICTIVE BUT FUNUniversal App - Designed for iPhone and iPad Rival Stars Basketball is a fun mixture of basketball and card collecting but its energy system will annoy.   | Read more »
Rubicon Development Makes Over a Dozen o...
Rubicon Development Makes Over a Dozen of Their Games Free For This Weekend Only Posted by Jessica Fisher on October 24th, 2014 [ permalink ] | Read more »
I Am Dolphin Review
I Am Dolphin Review By Jennifer Allen on October 24th, 2014 Our Rating: :: NEARLY FIN-TASTICUniversal App - Designed for iPhone and iPad Swim around and eat nearly everything that moves in I Am Dolphin, a fun Ecco-ish kind of game.   | Read more »
nPlayer looks to be the ultimate choice...
Developed by Newin Inc, nPlayer may seem like your standard video player – but is aiming to be the best in its field by providing high quality video play performance and support for a huge number of video formats and codecs. User reviews include quotes such as “I have tested many apps but this one is my only official player for all my iDevice,” “I... | Read more »
Fighting Fantasy: Caverns of the Snow Wi...
Fighting Fantasy: Caverns of the Snow Witch Review By Jennifer Allen on October 24th, 2014 Our Rating: :: CLASSY STORYTELLINGUniversal App - Designed for iPhone and iPad Fighting Fantasy: Caverns of the Snow Witch is a sterling release from Tin Man Games, as per usual.   | Read more »
A Few Days Left (Games)
A Few Days Left 1.01 Device: iOS Universal Category: Games Price: $3.99, Version: 1.01 (iTunes) Description: Screenshots are in compliance to App Store's 4+ age rating! Please see App Preview for real game play! **Important: Make sure your device is supported! A Few Days Left supports iPhone 4s or newer, iPad 3 or newer. The... | Read more »
Toca Boo (Education)
Toca Boo 1.0.2 Device: iOS Universal Category: Education Price: $2.99, Version: 1.0.2 (iTunes) Description: BOO! Did I scare you!? My name is Bonnie and my family loves to spook! Do you want to scare them back? Follow me and I'll show you how!SCARE | Read more »
Intuon (Games)
Intuon 1.1 Device: iOS Universal Category: Games Price: $.99, Version: 1.1 (iTunes) Description: Join the battle with your intuition in a new hardcore game Intuon! How well do you trust your intuition? Can you find a needle in a haystack? Can you reveal the truth among the lies? Intuition is your weapon!* Challenge!* Guess!* Win... | Read more »
All contents are Copyright 1984-2010 by Xplain Corporation. All rights reserved. Theme designed by Icreon.