Main Nav

Walters State is currently looking at ways to manage our Apple OS computers in a Windows Active Directory based domain structure.  As part of this we are also looking into the imaging of these computers especially in a lab environment due to the introduction of 2 new labs.  We would appreciate hearing from those of you who are already doing either of these in your environments.  What products do you recommend or suggest avoiding, do you use OS X server as part of this environment etc.    Any assistance appreciated.

 

George Rollins

Walters State Community College

Morristown, TN


This transmission, regardless of modality, may contain confidential information and may be subject to protection under the law. If you are not the intended recipient, or an authorized agent for the intended recipient, you are hereby notified that use, such as but not limited to disclosure, copying, or distribution, is prohibited. Please destroy any and all copies immediately and notify the sender of this erroneous receipt.
********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

Comments

You will want to look at DeployStudio and InstaDMG (for imaging), as well as Casper, AbsoluteManage, and DirectControl (for management). There are MANY others, but these appear to be the front-runners. You'll also want to examine Apple Remote Desktop. -- Bruce Carter, Center for Creative Computing, University of Notre Dame, Notre Dame, IN 46556
Hi George,

Macalester currently uses DeployStudio to image and Apple Remote Desktop to (minimally) manage our lab Macs, which are not currently joined to AD.  However, we recently purchased Casper and will be implementing it soon, and joining the lab Macs to AD will be a part of that.  

As a side note, Casper had previously been off the table for us due to cost, but they recently changed their licensing for higher ed, which made it much more affordable.

Rachel

Rachel Boutilier Weaver
Client Services Consultant
Macalester College ITS
(651)696-6507
rboutili@macalester.edu



Message from mbroe@oakland.edu

We currently have 13 iMacs deployed for public lab machines and a few for individual staff.  We've used Carbon Copy Cloner to image them and create backups.  We use a simple workgroup for our public machines, Macs included.

George,

At Bowdoin College we use DeployStudio to image about 800 Macs of various vintages. Most of those are in lab environments where we run both OS X and Windows 7 64-bit using BootCamp and we use DeployStudio to image both operating systems. We do use ARD when we need to for immediate actions but we also use Munki to manage software updates, software packages and other settings. Being an Altiris shop we use Symantec Client Management Suite 7.1 for some management as well.

We do bind all of our machines to AD and had extended our AD schema many years ago to accommodate the management of policy. Now we will be using Profile Manager on Lion Server to create the policies and then bundle them up for deployment. Our lab machines will have policy deployed through Munki but we may enroll faculty and staff machines directly so that they can get live changes when needed. We haven't completely decided on that yet.

If we can be of any assistance, please let me know.

Jason


Jason Pelletier
Manager of Public Computing Services
Bowdoin College
jpellet2@bowdoin.edu



We use Casper [http://www.jamfsoftware.com/] and we couldn’t be happier.  We also manage/provision the campus iPads through Casper. 

 

AJS

 

Anthony J. Santucci

Technology Support Services

Appalachian State University

Boone, NC

Not sent from a iDevice

 

For technical support, please enter a support request at:

http://support.appstate.edu/help

 

 

Here at Albright College we use DeployStudio (http://www.deploystudio.com) for our Mac OS X imaging purposes. It's a great tool with a good deal of versatility.

We're using the magic triangle setup (http://docs.info.apple.com/article.html?path=ServerAdmin/10.6/en/odfd7c23d9.html), which results in login authentication being handled by our Active Directory implementation and Mac OS X client management being handled by MCX records configured through Mac OS X Server's Workgroup Manager (Mac OS X Server 10.6, I haven't played with 10.7 yet).

For software installations, remotely assisting users, running reports, and running updates, I use Apple Remote Desktop.

The one flaw in our implementation is that I have some difficulty determining which granular updates have been performed on a unit. It is trivial to determine if a unit is patched with Mac OS X update 10.7.X, but I have not yet found a way to determine if Security Update 2012-XXX has been applied. The best way I've found around this so far is to send UNIX commands to units instructing them to install the updates through the command line (http://support.apple.com/kb/HT1974, it says it pertains to Mac OS X Server, but the command line works on clients as well). I would be interested in hearing how other institutions are dealing with this. If anyone is willing to discuss it, please contact me directly. I don't want to hijack this topic.

If I can be of any further assistance, feel free to contact me.

--
Branden Ohlinger
Albright College IT Services
bohlinger@alb.edu
610-921-7223
********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.

There is common stereotype in the IT world that managing Macs is harder than Windows. The truth is actually most enterprise IT shops simply never invested enough time in supporting the Mac to have an educated opinion either way. Here's my humble attempt at brain dumping 15 years of Mac support in the education and enterprise… If you are managing Macs in an enterprise organization two resources you must know about are: 1. MacEnterprise (http://www.macenterprise.org/mailing-list) 2. PSU Mac Admins Conference (http://macadmins.psu.edu). They just posted all the videos from this past year's event, which cover tools below in excruciating detail (http://www.youtube.com/user/psumacconf/videos). GETTING STARTED Lots of good tools mentioned in this thread for Mac Management. Consider ARD + DSS your starting point – basic remote control and imaging workflows. Dedicate a specific Mac to act as an ARD Task Server and you have a basic inventorying and software deployment tool as well. Apple wrote a whole white paper on ARD TS (http://manuals.info.apple.com/en/ARD_Task_Server.Pdf) InstaDMG is a great tool as well for updating your traditional, monolithic image. If you are binding your Macs to Active Directory there are also a series of 3rd party AD plugins that claim to offer Mac management/install capabilities (Quest, BeyondTrust, Centrify). In my experience cost of these plugins are generally as high or higher than full management suites. For advanced configuration management, software update management, and license tracking first decide what is more valuable to you: time or money. I HAVE NO TIME! Buy a commercial Mac management suite that works. I say this because many vendors claim Mac management but really only tack basic functions on to their Windows-based suite. JAMF Casper is the market leader here (http://www.jamfsoftware.com/products/casper-suite) and mentioned here by several others. Casper is exclusively Apple, something that allows them a degree of focus on specialization second to none. Their configuration management (read: group policy for Macs) is unmatched. They also manage iOS devices profiles, app store licensing, and deployment using the same UI/interface that handles the Macs. Absolute Manage (http://www.absolute.com/products/endpoint-management/absolute-manage) is another decent commercial suite that offers a more universal approach – handling deployment/management/updates for Windows, Mac, iOS, and Android. If you have no existing Windows management infrastructure like SCCM or others Absolute is worth a real look. Others: BigFix, Altiris, KACE, I HAVE NO MONEY! Look into advanced open-source tools like Munki for SW installs (http://code.google.com/p/munki), Reposado for SW update service (http://managingosx.wordpress.com/2011/05/04/introducing-reposado), and/or Puppet for installs/sync/deployments (http://projects.puppetlabs.com/projects/puppet/wiki/Puppet_Mac_OSX). PS: I wrote a whole matrix comparing several of these solutions as we were rolling out SCCM and looking for a comparable solution for Mac. You can see that at: https://docs.google.com/spreadsheet/ccc?key=0Ane3dV9FGdGLdEU5Skc4QTl4dU1... Clif Hirtle User Services Development University of CT Info Technology Services From: USERSERV automatic digest system > Reply-To: The EDUCAUSE User Services Constituent Group Listserv > To: "USERSERV@LISTSERV.EDUCAUSE.EDU" > Subject: USERSERV Digest - 30 May 2012 to 31 May 2012 (#2012-61) [http://LISTSERV.EDUCAUSE.EDU/archives/images/b-listserv.jpg] [http://LISTSERV.EDUCAUSE.EDU/archives/images/b-version.jpg] USERSERV Digest - 30 May 2012 to 31 May 2012 (#2012-61) Table of contents: * Apple Computers - Management and Imaging (4) * Apple Computers - Management and Imaging (2) 1. Apple Computers - Management and Imaging * Apple Computers - Management and Imaging (05/31) From: "Rollins, George B." > * Re: Apple Computers - Management and Imaging (05/31) From: Bruce Carter > * Re: Apple Computers - Management and Imaging (05/31) From: Mitchell Roe > * Re: Apple Computers - Management and Imaging (05/31) From: Anthony J Santucci > 2. Apple Computers - Management and Imaging * Re: Apple Computers - Management and Imaging (05/31) From: Rachel Boutilier Weaver > * Re: Apple Computers - Management and Imaging (05/31) From: Jason Pelletier > Browse the USERSERV online archives. [http://LISTSERV.EDUCAUSE.EDU/archives/images/b-fsecure.gif][http://LISTSERV.EDUCAUSE.EDU/archives/images/b-lpowered.gif] ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
Would either of these resources be appropriate for iPad management? On 6/1/2012 9:12 AM, Hirtle, Clif wrote: > There is common stereotype in the IT world that managing Macs is harder than Windows. The truth is actually most enterprise IT shops simply never invested enough time in supporting the Mac to have an educated opinion either way. Here's my humble attempt at brain dumping 15 years of Mac support in the education and enterprise… > > If you are managing Macs in an enterprise organization two resources you must know about are: > > 1. MacEnterprise (http://www.macenterprise.org/mailing-list) > 2. PSU Mac Admins Conference (http://macadmins.psu.edu). They just posted all the videos from this past year's event, which cover tools below in excruciating detail (http://www.youtube.com/user/psumacconf/videos). > > GETTING STARTED > Lots of good tools mentioned in this thread for Mac Management. Consider ARD + DSS your starting point – basic remote control and imaging workflows. > > Dedicate a specific Mac to act as an ARD Task Server and you have a basic inventorying and software deployment tool as well. Apple wrote a whole white paper on ARD TS (http://manuals.info.apple.com/en/ARD_Task_Server.Pdf) > > InstaDMG is a great tool as well for updating your traditional, monolithic image. > > If you are binding your Macs to Active Directory there are also a series of 3rd party AD plugins that claim to offer Mac management/install capabilities (Quest, BeyondTrust, Centrify). In my experience cost of these plugins are generally as high or higher than full management suites. > > For advanced configuration management, software update management, and license tracking first decide what is more valuable to you: time or money. > > I HAVE NO TIME! > Buy a commercial Mac management suite that works. I say this because many vendors claim Mac management but really only tack basic functions on to their Windows-based suite. > > JAMF Casper is the market leader here (http://www.jamfsoftware.com/products/casper-suite) and mentioned here by several others. Casper is exclusively Apple, something that allows them a degree of focus on specialization second to none. Their configuration management (read: group policy for Macs) is unmatched. They also manage iOS devices profiles, app store licensing, and deployment using the same UI/interface that handles the Macs. > > Absolute Manage (http://www.absolute.com/products/endpoint-management/absolute-manage) is another decent commercial suite that offers a more universal approach – handling deployment/management/updates for Windows, Mac, iOS, and Android. If you have no existing Windows management infrastructure like SCCM or others Absolute is worth a real look. > > Others: BigFix, Altiris, KACE, > > I HAVE NO MONEY! > Look into advanced open-source tools like Munki for SW installs (http://code.google.com/p/munki), Reposado for SW update service (http://managingosx.wordpress.com/2011/05/04/introducing-reposado), and/or Puppet for installs/sync/deployments (http://projects.puppetlabs.com/projects/puppet/wiki/Puppet_Mac_OSX). > > > PS: > I wrote a whole matrix comparing several of these solutions as we were rolling out SCCM and looking for a comparable solution for Mac. You can see that at: https://docs.google.com/spreadsheet/ccc?key=0Ane3dV9FGdGLdEU5Skc4QTl4dU1... > > Clif Hirtle > User Services Development > University of CT Info Technology Services > > From: USERSERV automatic digest system> > Reply-To: The EDUCAUSE User Services Constituent Group Listserv> > To: "USERSERV@LISTSERV.EDUCAUSE.EDU"> > Subject: USERSERV Digest - 30 May 2012 to 31 May 2012 (#2012-61) > > [http://LISTSERV.EDUCAUSE.EDU/archives/images/b-listserv.jpg] [http://LISTSERV.EDUCAUSE.EDU/archives/images/b-version.jpg] > > USERSERV Digest - 30 May 2012 to 31 May 2012 (#2012-61) > Table of contents: > > * Apple Computers - Management and Imaging (4) > * Apple Computers - Management and Imaging (2) > > 1. Apple Computers - Management and Imaging > * Apple Computers - Management and Imaging (05/31) > From: "Rollins, George B."> > * Re: Apple Computers - Management and Imaging (05/31) > From: Bruce Carter> > * Re: Apple Computers - Management and Imaging (05/31) > From: Mitchell Roe> > * Re: Apple Computers - Management and Imaging (05/31) > From: Anthony J Santucci> > 2. Apple Computers - Management and Imaging > * Re: Apple Computers - Management and Imaging (05/31) > From: Rachel Boutilier Weaver> > * Re: Apple Computers - Management and Imaging (05/31) > From: Jason Pelletier> > > > > > Browse the USERSERV online archives. > > > [http://LISTSERV.EDUCAUSE.EDU/archives/images/b-fsecure.gif][http://LISTSERV.EDUCAUSE.EDU/archives/images/b-lpowered.gif] > > ********** > Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/. > ********** Participation and subscription information for this EDUCAUSE Constituent Group discussion list can be found at http://www.educause.edu/groups/.
Close
Close


Annual Conference
September 29–October 2
View Proceedings

Events for all Levels and Interests

Whether you're looking for a conference to attend face-to-face to connect with peers, or for an online event for team professional development, see what's upcoming.

Close

Digital Badges
Member recognition effort
Earn yours >

Career Center


Leadership and Management Programs

EDUCAUSE Institute
Project Management

 

 

Jump Start Your Career Growth

Explore EDUCAUSE professional development opportunities that match your career aspirations and desired level of time investment through our interactive online guide.

 

Close
EDUCAUSE organizes its efforts around three IT Focus Areas

 

 

Join These Programs If Your Focus Is

Close

Get on the Higher Ed IT Map

Employees of EDUCAUSE member institutions and organizations are invited to create individual profiles.
 

 

Close

2014 Strategic Priorities

  • Building the Profession
  • IT as a Game Changer
  • Foundations


Learn More >

Uncommon Thinking for the Common Good™

EDUCAUSE is the foremost community of higher education IT leaders and professionals.