Hi, I'm a Mac, and I'm Your Enterprise Computer
Esther Schindler writes "Not just another 'why big companies should adopt Macs' article, CIO is running a piece assuming that Macs are already on the way in the door. Hi, I'm a Mac, and I'm Your Enterprise Computer offers advice to IT managers about how to integrate Apple systems into the existing IT infrastructure, and offers hints from leading Mac OS X experts on configuring those systems once they've arrived. '[A] key element in corporate Macintosh adoption is the importance of third-party software and custom solutions. They can help smooth the way for integrating Macs onto the network. While specialists say they wish third-party support were greater, the openness of the Mac makes correcting issues possible. Don't discount the lure of the well-worn path that draws and then traps your IT staff into familiar habits.'"
Remote Desktop can be configured on any OS X computer to allow connections from regular old VNC apps. I've used a free program called "Chicken of the VNC" to connect and it works great. In addition, you've got a standard POSIX layer for remote administration through the shell. I don't see what you're complaining about.
At the company I'm working for, Macs are getting attention at the Vice President level where they're configured to run Windows XP in a Parallels virtual windows machine to run those must have Windows applications. Since I'm the only Mac owner on a PC-centric IT staff, I got a bit of job security as a Mac guru. I keep telling people that a Mac is PC with a better OS. :)
Most of this article is pretty good, but I disagree with one of the early bits about supporting Macs in a PC-oriented office:
The article goes on to say that some of that may be because these particular Mac users whine a lot and need more help (my words), but also "... due to the nature of the tools we use on the Mac."This contradicts both my experience and the experience of an awful lot of tech support people I know. In PC-oriented offices where Macs are used, the tech support folks rarely have to fiddle with the Macs. The Mac apps don't seem to cause any more problems than the PC apps, so the support costs are about the same. Maybe Publicis Group is a bit more PC-oriented than the CIO is willing to admit?
"The Macs require a greater density of field associates. Where we have 1-to-150 PC techs to users, we're somewhere down to 1-to-100 for Macs. I think that's due partly to the technology and partly due to the users. The creatives are more demanding and you have to be more responding, because those are the people that clearly create our revenue," says Anschuetz.
That's the direct opposite of my experience (More like one Mac guy for 700-800 Macs, one PC guy for about 100-150 PCs), but I suppose a university environment is a bit different from a creative environment (at least outside the art/music/etc departments).
... then what kind of computer are they using on the Klingon ships?
... then what kind of computer should I use at home?
... then can I use my iPod as a PDA?
Using Apple Remote Desktop (for OS patching, application installs, configuration) or any of several open-source VNC solutions (to help lost users by taking control of the machine) remote management of enterprise Macs is not only possible, but easy.
I manage a small cluster of Macintoshes (for video production) in a 95% Windows shop. If anything, I think I have a far easier time than the IT Service that maintains the Windows machines (they often have a lot of complex licensing issues to wade through).
These stories are free but worth money.
Ya, if only they had a Remote Desktop application, or something that could push settings the same sort of way that the Active Directory does.
Even ssh would be a start.
Why doesn't Apple make these tools available?
"I use a Mac because I'm just better than you are."
What do they mean by "openness" here. (Just curious - don't interpret this as troll.)
As the other guy said, you can use Apple Remote Desktop which lets you run the other computer's desktop or push apps and updates out to them all automatically. You can use free VNC programs to connect to ARD or free programs like Chicken of the VNC can do the whole thing itself (that's how I interact with the mini that acts as my media and file server). There's also ssh and any of a host of other UNIX tools.
Netboot on Macs really works very well too. You can plug a new Mac into your network, hold down a key on boot, select the image you'd like it to run and after it downloads it, you're off and running, new computer completely configured to your spec.
Directory services and limited user accounts, much like any other managed environment.
Someone who has an Enterprise level agreement with Apple, let us know how much an "enterprise" level iMac costs in bulk.
I know for a fact that both Dell and HP's "enterprise" desktop systems with a 19" flat screen monitor are about $650. (HP DC7700 for example) This includes an Intel Core2 Duo, 1.0 GB of ram, an 100 GB SATA hdd, integrated Intel graphics, and a SATA DVD/CD-RW combo drive. Dell's product is very similar but a little bit less ($750). Both systems as I said, come with a 19" flat screen.
The cheapest iMac is the $999 iMac, which is only 512 MB (but does have a larger hdd). I'd love to know the corporate pricing. To move to the 19"... add another 200 to that. Still, thats retail store, so someone kindly provide the corporate pricing.
Till Apple has prices that are similar, no large enterprise in their right minds would make the move, considering most of those, if not all of the fortune 500's are running Windows on the desktop....
I'm not a Mac user or anything, but if they're right about this trend, I say more power to 'em. I say anyone stepping up and taking a swing at Microsoft's market share is a good thing since it will drive innovation and value rather than good ol' incumbency.
Quiz: True or False -- On a scale of 1 to 10, what is your middle name?
I'm not sure if this is random flamebait, or if you are really unfamiliar enough with Linux to ask such a question. Linux (and Unix) have comprehensive rights-management and file-permission systems in place to restrict a user from manipulating system files or other other users' files. A Linux user can edit/mangle/delete/destroy his own files, but basic (and standard) file permission settings prevent him from intentionally or unintentionally damaging other files. All permissions are manageable by the super user of the system (root), which is the "central control" you were asking for.
Congratulations. Now there's nothing stopping corporations from making the switch.
For Mac OS X 4.5+, Apple offers an emulator named Boot Camp.
I stopped reading after that. The entire article was this bad.
There are many applications and platforms out there that do this, including:
Apple Remote Desktop
LANDesk Management Suite
Casper Management Software
LanDesk is a cross platform solution. There are also management extensions available that allows you to integrate Mac workstations into your existing Microsoft SMS 2003 environment if thats whats being used: http://www.quest.com/quest-management-xtensions-f
I'm sure there are more out there. Just look. Most of these tools have been available for the last several years.
I think years from now many people will look back on the period of approximately 1985-2005 as a "Golden Age" for Microsoft, when they were able to rake in huge profits by illegally dominating huge chunks of the personal computer industry with the Wintel duopoly. Of course for many of us we will look back on this period as "The Dark Ages" of little or no competition in the PC marketplace. Really what we are seeing now, as Apple and other firms like AMD start to make inroads into the enterprise market, is a return to normalcy. Competition on price and competition on features is a healthy state for the computer hardware & software industry. Capitalism and our free economy is really founded on the notion that there is not a central power (be it a totalitarian system of government, or a monopolistic corporation) that can control an entire sector.
Also, please take a look other major industries that have healthy competition - Plenty of airlines -> lower airfares. Plenty of car manufacturers -> lower car prices. Plenty of restaurants -> reasonable cost of food.
The idea that there is only one group of people in the world smart enough to create a reliable and modern PC operating system is simply a falsehood.
I can throw as many stones as I wish; my house is made of transparent aluminum.
You mean something like Remote Desktop's "AutoInstall" feature?m l#autoinstall
http://www.apple.com/remotedesktop/newfeatures.ht
The Statue of Liberty is America's lawn jockey.
That article is almost four years old. Many improvements were made with Mac OS X 10.4
Open Directory is based on OpenLDAP. It's mentioned at least five times on that page.
"Don't discount the lure of the well-worn path that draws and then traps your IT staff into familiar habits" Don't mess with your IT staff and it's paths.
Wrong. There was an EFI update that added a BIOS compatibility layer. I've installed Windows on Intel Macs right out of the box, no Boot Camp required. Boot Camp is just Apple's way of making it easy on people. It's the EFI update that made it possible.
Enterprise Computer systems need to be easy to open up and the mini is not easy to do so and the mac pro cost is too high.
The I-macs are not easy to open as well and they can not fit in to the same space as desktop + screen on it's own can. It may fit but the side loading cd / dvd may be hard to use then also Built-in iSight camera can be big NO NO some places.
Didn't read the article: Check
Makes a blanket, factually correct statement: Check
Makes a righteous, indignant statement: Check
Introduces personal, anecdotal views as fact: Check
Brings up a meaningless comparison: Check
Closes with a blanket assertion without any facts: Check
Congratulations, you are on your way to becoming a real slashdotter. You must not be new here! :P
Well, there's spam egg sausage and spam, that's not got much spam in it.
"The Mac itself, the nature of the Mac, how it works and how it looks, is actually more conducive to the creative mindset. But those same things have also created a religious factor where the typical 'creative'--they can't even touch a PC keyboard. I'm being actually serious," says Christian Anschuetz, executive vice president and CIO of Publicis Groupe, which is based in Paris.
I haven't finished the article yet, but while I can believe this mindset being prevalent in years past, but I don't think I've met any designer in the past 5 years or so with such an anti-PC attitude. I've worked on a mac since my freshman year in college, but still had no problem sitting down and doing design work on a PC. And this was over a 2 year period. Using CorelDraw because my employer was Canadian and apparently Corel is a Canadian company.
Likewise, I've met plenty of PC users who are willing to sit down with a Mac if that's what the job requires. I just don't think this idea of "He's creative so he HAS to use a Mac" is valid anymore. You do the job with the tools you have. At my current job, once the IT dept. found out that I was going to be hired they immediately went out and bought a Mac. If I had been asked I would have said I could work in either platform. It doesn't matter as long as I have the tools to get the job done.
Sure, PC and Mac users like to make jabs at each other every now and again, but the few times I've met hard core Mac/PC users, they've been jackasses who weren't nearly as productive as they'd like to believe.
Anyway, just my thoughts.
--Erik
One of the things that an Apple Admin absolutely can't afford to get trapped in is the religious wars aspect of OS advocacy. The shell is a key element of remote administration and I'm glad I have it.
Well, {obligatory statement about my computer background and/or preference}, but i {explanation of what is used at home and in office}.
With that said, {obligatory statement to stave off mac cult mods}, but really {please don't hurt me}.
In my experience,{statement involving one of the following: tech-staff experience, home experience, or work environment}.
Although, {subtle jab at microsoft indicating preference for neither windows nor mac}
{statement that anything to jab at big guys is good}
But really, my take on this? Businesses will use what businesses will buy. Sometimes you keep using a law firm because it works, and as long as they don't cause mistrials or fail due-dilligence, they stay on retainer. Until windows fails miserably, businesses will continue to use what they've used. The small, independent companies are the ones that get all the mac-related press.
{begins waiting for examples of "big" companies that use macs in numbers greater than 90%}
Is it sad that I am more likely to recognize you and your posts by your sig than your name or UID?
ssh? a commandline on a Mac??? Say it isn't so.
Man, welcome to THE YEAR 2000 already.
Apple Remote Desktop is not a comparable product to VNC. It's not like Terminal Services, either. ARD does provide that sort of remote desktop viewing, but it also provides a bevy of other remote-management features, such as being able to install the same package on several machines or running the same script on several machines, using only a few clicks.
Macs can also connect to Windows AD servers for authentication, and Apple provides their own directory services through their own directory server. Many of the same things can be accomplished, though not always through the same methods.
"The Mac itself, the nature of the Mac, how it works and how it looks, is actually more conducive to the creative mindset."
Nothing infuriates me more than this single, completely mistaken idea that there are people who, unlike "most" people, have some magical inborn gift of creativity, where in fact ANYONE can be creative. It's only this attitude that propagates an otherwise completely artificial division between "normals" and "creatives." I am a graphic and interactive designer at a small Manhattan design firm, and I witness this bullshit attitude EVERYWHERE. "Oh, that's a creative's job. I wouldn't know what that means." It's willful ignorance, just like any other kind of willful ignorance, and it goes both ways. Ever had to deal with a web designer who has no freaking idea how web pages even work? It's because they buy into this insane notion that there's a division between creativity and "everything else."
And thanks to this all-pervading, quasi-classist attitude, the cult of mac has grown up around these supposed "creatives." Ever heard of "the creative class?" The fact that someone came up with that idea blows my mind! Designers and technicians alike need to realize that the only thing keeping this sensibility afloat is common belief. Those that don't believe they are capable of creativity ought to give some time and thought to it, and those that believe they are "a creative" need to learn that they are not defined by their job title.
Limina.Log
Dell Dimension 9200 with 1.8Ghz Core 2 Duo, 1GB Dual Channel DDR2, 80GB HD, CDRW/DVDROM, 256MB nVidia Geforce 7300LE, and 20" Widescreen LCD Monintor for $699 with FREE Shipping!
www.gotapex.com
Always has links to dell with the best prices. Not a corporate bulk price.
Puto
The Revolution Will Not Be Televised
Yes, the Mac does that, too. You just need Mac OS X Server and Open Directory, just as with Windows, you would need Windows Server 2003 and Active Directory.
I have some experience with Mac OS X in a mixed enterprise environment, consisting of Linux servers and Linux and Windows desktops. Linux desktops use NFS and NIS, while Windows machines are using a Samba domain controller on the Linux servers. So far so good. Till the moment we got some Mac OS X desktops. Mac OS X is Unix, so using NFS and NIS should be easy, right? Wrong! First, Mac OS X has really crippled the Unix back-end: there's no more fstab file, no more init scripts we *nix users are used too,... To integrate Mac OS X in NIS, there's a graphical interface. But: it does not really work! Most of the time, network accounts simply won't be available when the login screen appears, if you configure it like that. Using the configuration files, already works a bit better, but even then it often does not work. Workarounds mentioned in a Mac OS X and NIS HOWTO, consist of adding ugly sleeps and killall -HUP lookupd commands in some scripts. We found out, things work most reliable, if you force lookupd to use at maximum 1 thread. It seems like lookupd is full of race conditions :-/ And even now, sometimes machines hang on a blue screen when shutting down Mac OS X. And when a user gets over quota, his whole session hangs with a "spinning beachball of death".
On the above mentioned web page, the conclusion is:
"we officially withdraw the statement that NIS features are compatible with current versions of 10.4."
I cannot agree more. Mac OS X is certainly not enterprise ready to be integrated in mixed environments.
For network printing, Mac OS X uses CUPS[1]. And the printer drivers that you download from the manufacturers which are labeled "for Mac" are not CUPS drivers. They're local drivers only (ie. for printers physically connected to the computer with a USB cable). These local drivers can't be used for network printers.
Look here, here or just f*cking google it yourself.
From http://www.apple.com/macosx/features/windows/
Share Printers Macs and PCs can also share printers. Shared Windows printers automatically appear in the Mac OS X Printer Setup Utility so they can be added to the Macintosh as a local printer queue. You can create a queue for as many shared Windows (and Macintosh) printers as you like, and any application that can print on the Macintosh can print to the shared printer.Jesus was a compassionate social conservative who called individuals to sin no more.
Yes, I finally understand now: Windows was the reason for that, not John Roth, et. al.'s, greed and poor management. And then that bastard ran off with over $300 million while 60,000 people lost their jobs.
Although from my limited perspective, the move away from Mac to Windows may have been symptomatic of the bad management.
Een Suviet Roosha, JOKE GET YOU!
I drank what? -- Socrates
It would also let me view an entire lab's computers and see which students are taking notes and which were goofing off. Man, the things some students IM about (usually involved being drunk the night before and who they did). The professors loved it when I set that up on the lectern Mac. After awhile, they must have thought the profs were psychic.
I drank what? -- Socrates
Yes, to completely clone the image, you'd have to either be booted from a CD, an install of OS X on another external drive, or a network volume. An external drive with an install of OS X on it is a damned handy troubleshooting tool.
/Applications/Utilities.
There is another alternative... if the replacement machine is running OS X 10.4 and already has a standard system build or anything on it, you can run Migration Assistant on it with the broken machine connected in target mode. If you're not familiar with Migration Assistant, it's sort of like Files and Settings Transfer Wizard on XP, but much better. It will pull over non-Apple applications and all user data, nearly seamlessly. I use it all the time when I roll out replacement machines to people, and it has made my life much easier. The only issues I see are occasionally some applications that require activation will need to be reactivated on the replacement machine. You can find Migration Assistant in
~Philly
Curious. IT doesn't bother wasting time replacing parts like that at my current (very large) company. They just replace the entire device (aka the laptop). It's not cost effective to diagnose a hardware problem on the fly, then replace the one faulty piece of equipment.
That's what the point of hardware support contracts are.
We're talking Enterprise, not Small Business.
It's more expensive to pay a tech the time and effort to troubleshoot and diagnose a problem with hardware than it is to simply replace all of the hardware. Particularly in a very large Enterprise environment where you have tiered IT people - the simple techs can easily walk to someone's office and swap out the whole box. Making the advanced techs troubleshoot a single piece of hardware (like a laptop or desktop) is generally a waste of time and resources.
So maybe that means that Macs are in fact MORE Enterprise ready - they discourage a tech from tinkering with an individual piece of hardware, and just replace the whole system...
Oddly, it is not MacOS X Server that will help you out in this case, it is Apple Remote Desktop. Apple has chosen a curious mix of functions to put in a product of that name (the least of which is the remote desktop viewing part).
With ARD it is really easy to push anything you want out to any size group of Macs that have been configured for this. For some things you need to know a few trick involving making your own packages (like that you can create a package with just scripts to run), but the learning curve is remarkably shallow.
However, if you are trying to match group policy, then MacOS X Server, and notably the Wrokgroup Manager part of it are the way to go.
Hey Steve,
:)
n t_Admin_v10.4B.pdf
I'm not quite up on the Windows stuff, but I believe that roaming profiles are just network mounted home directories, appropriate metadata and central authentication.
On the other hand Apple's portable home directories are designed for laptops, a sometimes connected model. When a user connects their computer to your network, the user's home directory (or the parts of it that are pre-selected) automatically syncs with a copy of their home directory on the server.
I'm not sure what your managed mac environment currently looks like. At the least you'll need some form of network home directories, over samba/MS's SMB/CIFS or NFS. If you've got an existing AD environment that could work. If these laptops never come onto your network, then it's unreasonable to provide backups and you should totally tell your users that.
See the "User Management for Portable Computers" section of this document:
http://images.apple.com/server/pdfs/User_Manageme
Isaac