Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×
Apple Businesses IT

Hi, I'm a Mac, and I'm Your Enterprise Computer 469

Esther Schindler writes "Not just another 'why big companies should adopt Macs' article, CIO is running a piece assuming that Macs are already on the way in the door. Hi, I'm a Mac, and I'm Your Enterprise Computer offers advice to IT managers about how to integrate Apple systems into the existing IT infrastructure, and offers hints from leading Mac OS X experts on configuring those systems once they've arrived. '[A] key element in corporate Macintosh adoption is the importance of third-party software and custom solutions. They can help smooth the way for integrating Macs onto the network. While specialists say they wish third-party support were greater, the openness of the Mac makes correcting issues possible. Don't discount the lure of the well-worn path that draws and then traps your IT staff into familiar habits.'"
This discussion has been archived. No new comments can be posted.

Hi, I'm a Mac, and I'm Your Enterprise Computer

Comments Filter:
  • by DurendalMac ( 736637 ) on Thursday April 26, 2007 @02:33PM (#18888553)
    Remote Desktop can be configured on any OS X computer to allow connections from regular old VNC apps. I've used a free program called "Chicken of the VNC" to connect and it works great. In addition, you've got a standard POSIX layer for remote administration through the shell. I don't see what you're complaining about.
  • by CheeseburgerBrown ( 553703 ) on Thursday April 26, 2007 @02:37PM (#18888651) Homepage Journal
    Using Apple Remote Desktop (for OS patching, application installs, configuration) or any of several open-source VNC solutions (to help lost users by taking control of the machine) remote management of enterprise Macs is not only possible, but easy.

    I manage a small cluster of Macintoshes (for video production) in a 95% Windows shop. If anything, I think I have a far easier time than the IT Service that maintains the Windows machines (they often have a lot of complex licensing issues to wade through).

  • by ceoyoyo ( 59147 ) on Thursday April 26, 2007 @02:39PM (#18888701)
    As the other guy said, you can use Apple Remote Desktop which lets you run the other computer's desktop or push apps and updates out to them all automatically. You can use free VNC programs to connect to ARD or free programs like Chicken of the VNC can do the whole thing itself (that's how I interact with the mini that acts as my media and file server). There's also ssh and any of a host of other UNIX tools.

    Netboot on Macs really works very well too. You can plug a new Mac into your network, hold down a key on boot, select the image you'd like it to run and after it downloads it, you're off and running, new computer completely configured to your spec.
  • by DurendalMac ( 736637 ) on Thursday April 26, 2007 @02:40PM (#18888717)
    Directory services and limited user accounts, much like any other managed environment.
  • Do me a favour... (Score:5, Informative)

    by MSFanBoi2 ( 930319 ) on Thursday April 26, 2007 @02:40PM (#18888719)
    Someone who has an Enterprise level agreement with Apple, let us know how much an "enterprise" level iMac costs in bulk.

    I know for a fact that both Dell and HP's "enterprise" desktop systems with a 19" flat screen monitor are about $650. (HP DC7700 for example) This includes an Intel Core2 Duo, 1.0 GB of ram, an 100 GB SATA hdd, integrated Intel graphics, and a SATA DVD/CD-RW combo drive. Dell's product is very similar but a little bit less ($750). Both systems as I said, come with a 19" flat screen.

    The cheapest iMac is the $999 iMac, which is only 512 MB (but does have a larger hdd). I'd love to know the corporate pricing. To move to the 19"... add another 200 to that. Still, thats retail store, so someone kindly provide the corporate pricing.

    Till Apple has prices that are similar, no large enterprise in their right minds would make the move, considering most of those, if not all of the fortune 500's are running Windows on the desktop....
  • Re:Higher TCO? (Score:5, Informative)

    by jimstapleton ( 999106 ) on Thursday April 26, 2007 @02:41PM (#18888729) Journal
    when I did tech support, our Windows:Mac ratio was probably 10:1

    Our support call issues, excluding hardware, were about 20:1 (windows:mac), but 8:1 (est) hardware.

    The time to fix a Windows problem was usually quicker though.

    "Error 3" popping up when a program crashes usually /is not/ helpful.
  • by netrarc ( 1083207 ) on Thursday April 26, 2007 @02:42PM (#18888761) Homepage
    I'm not sure if this is random flamebait, or if you are really unfamiliar enough with Linux to ask such a question. Linux (and Unix) have comprehensive rights-management and file-permission systems in place to restrict a user from manipulating system files or other other users' files. A Linux user can edit/mangle/delete/destroy his own files, but basic (and standard) file permission settings prevent him from intentionally or unintentionally damaging other files. All permissions are manageable by the super user of the system (root), which is the "central control" you were asking for.
  • Re:Do me a favour... (Score:5, Informative)

    by DurendalMac ( 736637 ) on Thursday April 26, 2007 @02:44PM (#18888799)
    Corporate bulk purchases can sometimes wrangle that price down to $900, maybe $850. However, despite what the article says, the experience of just about everyone else in the industry is that TCO for the Macs is much, much lower than that of a Windows box, making the purchase pay for itself after a while.
  • Re:Higher TCO? (Score:3, Informative)

    by 0racle ( 667029 ) on Thursday April 26, 2007 @02:45PM (#18888823)
    When they work, they work very well. When the OS or an app dies, well lets just say they whine and complain as much as their users do.

    Entourage is the biggest source of headaches. Get rid of that steaming pile and you're much better off.
  • by rizzo320 ( 911761 ) on Thursday April 26, 2007 @02:46PM (#18888837)

    No i didn't RTFA, but one of my biggest concerns has always been remote central management in the enterprise structure. IT can't always make "house calls" to each and every computer, there has to be ways of remotely accessing, configuring and maintaining the systems and I haven't seen much that supports OSX. Even with Linux there are tools that allow you to do that, and most all central configuration tools are Windows based.


    There are many applications and platforms out there that do this, including:
    Apple Remote Desktop [apple.com]
    LANDesk Management Suite [landesk.com]
    Casper Management Software [jamfsoftware.com]

    LanDesk is a cross platform solution. There are also management extensions available that allows you to integrate Mac workstations into your existing Microsoft SMS 2003 environment if thats whats being used: http://www.quest.com/quest-management-xtensions-fo r-sms/ [quest.com]

    I'm sure there are more out there. Just look. Most of these tools have been available for the last several years.
  • Comment removed (Score:3, Informative)

    by account_deleted ( 4530225 ) on Thursday April 26, 2007 @02:48PM (#18888859)
    Comment removed based on user account deletion
  • by Monokeros ( 200892 ) on Thursday April 26, 2007 @03:00PM (#18889081)
    You mean something like Remote Desktop's "AutoInstall" feature?
    http://www.apple.com/remotedesktop/newfeatures.htm l#autoinstall [apple.com]
  • Re:I smell a rat (Score:3, Informative)

    by rizzo320 ( 911761 ) on Thursday April 26, 2007 @03:00PM (#18889083)

    While third party lookupd agents were written, they were the exception rather than the rule." http://www.macdevcenter.com/pub/a/mac/2003/08/05/a ctive_directory.html [macdevcenter.com]


    That article is almost four years old. Many improvements were made with Mac OS X 10.4

    Openldap works good for me.


    Open Directory [apple.com] is based on OpenLDAP. It's mentioned at least five times on that page.
  • Re:Higher TCO? (Score:2, Informative)

    by jimstapleton ( 999106 ) on Thursday April 26, 2007 @03:05PM (#18889171) Journal
    Actually it was the apple mail program in 10.2 that did that.

    Better luck next time you play "Guess That MacOS"
  • Re:Odd... (Score:3, Informative)

    by nine-times ( 778537 ) <nine.times@gmail.com> on Thursday April 26, 2007 @03:14PM (#18889345) Homepage

    Yes, in my experience too, Macs require less time to support, but I've never done anything resembling a study. I can't tell you for sure whether they really took less time to support or if it just seemed that way.

    It's not just that they're easier to deal with (they are) or because they're more reliable (they seem to be), but also because Apple Remote Desktop [apple.com] is an amazing help. If you have to administer to a bunch of Macs and haven't used it, it's definitely worth a look. Hint: It's not the same thing as VNC or Terminal Services.

  • Re:Higher TCO? (Score:3, Informative)

    by Richard_at_work ( 517087 ) on Thursday April 26, 2007 @03:15PM (#18889373)
    Ive been using MacOSX since 10.3 as my main desktop and laptop, and unfortunately I have to say that Ive had a fair number of cryptic error messages with little explanation, usually only a negative number to google with (as an example and not a real number, Error -39). As a regular on #macosx on freenode, I would say that my experiences are not exactly rare either.
  • Re:Do me a favour... (Score:3, Informative)

    by 644bd346996 ( 1012333 ) on Thursday April 26, 2007 @03:19PM (#18889407)
    I only have access to the educational prices, but here goes:

    All the stock iMac configurations are $100 off the retail price. Upgrades are cheaper by a significant amount. Going from 2.16Ghz to 2.33Ghz is $225 instead of $250. iWork'06 is $39 instead of $79. Doubling the VRAM on the 20" is $68 instead of $75, and doubling the hard drive space is $180 instead of $200.

    The 20" Cinema display is $50 off, the 23" is $100 off, and the 30" is $200 off. The standard Mac pro is $200 off. The MacBook Pros are also $200 off. A 5-pack of MacBooks with 1GB of RAM starts at $5335. The standard Xserve is $300 off.

    I do not know if these prices go down further in bulk.

    Apples are still a bit expensive, but with the educational discount, the remaining premium is justified. I consider it a worthwhile investment to get a quiet all-in-one like the iMac.
  • Deskulation with OSX (Score:2, Informative)

    by fyngyrz ( 762201 ) * on Thursday April 26, 2007 @03:19PM (#18889409) Homepage Journal

    Keep the current keyboard, mouse and monitor, replace the PC with a 1 gig RAM/80 GB HD dual-core mini, and you're "Mac-ified" for $724.00. You can go to 120 GB HD for $824.00. Do it for a lot of desks and you should be able to do better on price - those prices are retail, onesies, direct from Apple. You get gigabit ethernet (and 10/100, of course), 4 USB 2.0 ports, a firewire 400 port, DVI/VGA monitor port, audio in and out, 1.66 GHz core speed, 24x CD/CDRW/DVD drive, and the current OSX, which includes Address Book, DVD Player, iCal, iChat AV, Mail, Preview, Web browser and even the software development system. You can slap Openoffice on there with zero trouble and zero cost, and you've got your basic corporate desktop, with a strong *nix underpinning for your power-users and an ultra-friendly, ultra-reliable GUI for everyone else.

    That initial cost is in the same zone, and you get one hell of a lot better computer, operating system, hugely lessened support load, tiny desktop footprint, still have the ability to concurrently run Windows (Parallels is the way to go, but it is a few extra bucks) with OSX... I put minis all over my software company and I haven't had any cause to regret it. We don't have a single desktop that runs a PC today, nor do I anticipate we ever will again.

  • Re:Do me a favour... (Score:5, Informative)

    by bolix ( 201977 ) <bolix.hotmail@com> on Thursday April 26, 2007 @03:22PM (#18889467) Homepage Journal
    Absolutely agree with this poster. I work in Academia in an Ivy League which purchases approx $10-15 million of Apple inventory a year. My main gripe is AppleCare. The Dell/HP/Lenovo systems bundle a 3 year warranty, Apple force you to license and purchase 3 year support separately and drive any price differential higher. On the other hand, xservers, xraid and xsan are definitely priced competitively with Dell/HP/Lenovo.

    Furthermore, Apple Enterprise Software Licensing and Sales are outright incompetent. I purchased ARD2.5 one month before 3.0 shipped, Sales backflipped on my eligibility for a "free" upgrade and eventually i gave up chasing down their mandarins, almost as bad as IBM. Nutty scenarios like iLife only bundled with new machines and not with OS upgrades which are stuck with inferior iPhoto etc? Arrgh!

    Apple should stick to the software business and not attempt to niche hardware costs attempting to compete with the marginally profitable Asian manufacturing. Apple cannot compete on the SMB tier.
  • by nine-times ( 778537 ) <nine.times@gmail.com> on Thursday April 26, 2007 @03:29PM (#18889587) Homepage

    Apple Remote Desktop is not a comparable product to VNC. It's not like Terminal Services, either. ARD does provide that sort of remote desktop viewing, but it also provides a bevy of other remote-management features, such as being able to install the same package on several machines or running the same script on several machines, using only a few clicks.

    Macs can also connect to Windows AD servers for authentication, and Apple provides their own directory services through their own directory server. Many of the same things can be accomplished, though not always through the same methods.

  • by puto ( 533470 ) * on Thursday April 26, 2007 @03:31PM (#18889617) Homepage
    Dell Dimension 9200 with 1.8Ghz Core 2 Duo, 1GB Dual Channel DDR2, 80GB HD, CDRW/DVDROM, 256MB nVidia Geforce 7300LE, and 20" Widescreen LCD Monintor for $699 with FREE Shipping!

    www.gotapex.com

    Always has links to dell with the best prices. Not a corporate bulk price.

    Puto
  • by amper ( 33785 ) * on Thursday April 26, 2007 @03:44PM (#18889851) Journal
    Yes, the Mac does that, too. You just need Mac OS X Server and Open Directory, just as with Windows, you would need Windows Server 2003 and Active Directory.
  • Re:Do me a favour... (Score:2, Informative)

    by ceoyoyo ( 59147 ) on Thursday April 26, 2007 @03:51PM (#18889967)
    I understand the sentiment, but to me it's the people who MUST have things like Outlook, Exchange and whatever else Microsoft says they should use this week who are the fanboys.

  • Re:Odd... (Score:5, Informative)

    by SuperBanana ( 662181 ) on Thursday April 26, 2007 @04:01PM (#18890129)

    I suppose a university environment is a bit different from a creative environment (at least outside the art/music/etc departments).

    Having worked for an advertising company, yes. Sometimes, if stuff doesn't go out the door on time - millions of dollars are at stake. Advertising industries are highly competitive, even against each other (the vast majority of advertising firms are owned by less than a half-dozen holding companies...and yes, the same 'children' compete against each other.) So whether it is a proposal, presentation to the client, or artwork- if it doesn't leave with the CCO (Chief Creative Officer) on time for his flight, or get downstairs to the courier to arrive at the client or their printing house...shit hits the fan.

    The closest comparison is probably "grant time" in the academic world.

    The art department where I worked were the neediest; they got the fastest computers (and got 'em more often) and they were the only department with gigabit ethernet. When shit broke you had to got to drop everything and get it fixed ASAP. They also tended to have more problems because of more complexity...tons of fonts(and a font manager like Suitcase), old versions of Quark that required Classic...inDesign, Adobe Distiller printer drivers, half a dozen different kinds of printers. Nowhere nearly as complex an software matrix as the copywriters and paper pushers who just need email, Word, Safari, and to be able to print to the laserprinter in the hallway.

  • PARENT IS BULLSHIT (Score:5, Informative)

    by aristotle-dude ( 626586 ) on Thursday April 26, 2007 @04:29PM (#18890575)

    One problem we ran into was network printer drivers.

    For network printing, Mac OS X uses CUPS[1]. And the printer drivers that you download from the manufacturers which are labeled "for Mac" are not CUPS drivers. They're local drivers only (ie. for printers physically connected to the computer with a USB cable). These local drivers can't be used for network printers.
    Look here [apple.com], here [ifelix.net] or just f*cking google it yourself.

    From http://www.apple.com/macosx/features/windows/ [apple.com]

    Share Printers Macs and PCs can also share printers. Shared Windows printers automatically appear in the Mac OS X Printer Setup Utility so they can be added to the Macintosh as a local printer queue. You can create a queue for as many shared Windows (and Macintosh) printers as you like, and any application that can print on the Macintosh can print to the shared printer.
  • by mfh ( 56 ) on Thursday April 26, 2007 @04:49PM (#18890847) Homepage Journal
    Neat stuff. I think it's important to note that Boot Camp might be included in the next version of MacOS because of Vista's license that prohibits the use of virtual environments like Parallels. I happen to really like how Parallels switches between the OSes, like flipping a page almost. ;-)

    I sold a setup to a customer in my store a while ago who loved how Parallels and XP worked, but I had to also sell him a full security setup for XP due to obvious reasons. You would be surprised how many customers have no idea what it takes to keep their machines secure on Windows systems. They figure that since they are buying Mac, they don't have to lock it down if they put Windows on it. Boy are they wrong! LOL
  • by Anonymous Coward on Thursday April 26, 2007 @04:53PM (#18890937)
    The first time I saw the iSight built into the new Mac laptops, I said to myself, "they just lost the possibility of selling any machines to any gov't contractor or gov't office ever as well as any company with a 'no camera/camera phone policy"

    Anybody actually doing such purchasing already knows that this is horseshit. [slashdot.org]:

    I should also note that, for government/military customers, Apple does have a contractor that can physically disconnect the iSight and internal microphone as part of the procurement process, and meets GSA schedules and requirements for "no-camera" or "no-microphone" environments; additionally, infrared, Bluetooth, and AirPort can also be disabled. This does not void any waranties. That contractor is:

    Holmans
    6201 N. Jefferson Ave
    Albuquerque, NM 887109
    Tony Greiner
    505 343 3529
    tgreiner@holmans.com

    GSA schedule GS-35F-0341N
    DOE authorized (LLNL and LANL)
    DOE "L" clearance personnel

    For individual customers, any Apple Authorized Service Provider can disconnect any or all of the above components, and are happy to accommodate such requests. Such requests also do not void warranties.

    Again, these components can all be disabled by software means in managed environments where physical disconnection/removal of the device(s) is not a requirement.
  • Re:Higher TCO? (Score:2, Informative)

    by OnlineAlias ( 828288 ) on Thursday April 26, 2007 @04:57PM (#18891011)
    "The time to fix a Windows problem was usually quicker though"

    That is the rub with MACs in the enterprise, non-existent enterprise back end support for hardware, no enterprise management tools, constant integration issues.

    The problem with MACs in the enterprise is Apple themselves. They don't want the market enough and don't think big even when they need to. One can look at their server line for proof...they don't offer enterprise high availability, hardware fault tolerance, nothing. They just say "Ooh, we have SAN technology". Ya, big deal. What if I need support when that goes down in the middle of the night with 10,000 users standing around? "Oooh, you'd be fooked in that case, we're at home in bed...."
  • by Anonymous Coward on Thursday April 26, 2007 @05:21PM (#18891395)
    I work for what Apple refers to as one of its largest customers (cannot disclose-- sorry). And, no, we are not in the movie business. We are in the consumer products & goods business.

    We are a mixed environment, with nearly equal PCs for Macs. And while Macs are easy to use in a standalone environment, our mac support, namely software distribution, is considerably more costly and taxing than our PC environment. There simply isn't a tool on the level of Microsoft's SMS, for the mac world. We wrote our own, a combination of SSH, FTP, and client side scripting. The problem is maintaining that code. Every new Apple cat release brings a somewhat major re-write of our end-point management tools.

    Group Policy is another sorely missed application. It would be nice to establish a setting and ensure that setting was refreshed or enforced every 60 mins or so like we have in the PC world. We simply don't have that, besides rolling our own. And not that rolling our own is something we shouldn't do, it's just considerably more expensive, ties to a changing architecture, and requires keeping developers on-staff that have knowledge of a tool that is not used anywhere else. Maybe we should sell the tool to lower the support costs, but that's just not a business interest our execs want to take on.

    My point? Apple needs to pony up the tools first.

    - -

    On another note: as soon as the business apps move to Apple, we'll get all of these "macs don't need anti-virus and don't have security problems" people to sing a different tune. All platforms have security problems. And while some are better than others, it should be taken into consideration just how mature the security (ahem, band-aids and duct tape) solutions are before switchly to a platform that's widely unused for those stiff, conservative business types. Our artists are fine, but they just don't draw the same crosshairs-of-a-target that are legal, HR, and finance people do.
  • by larkost ( 79011 ) on Thursday April 26, 2007 @06:50PM (#18892613)
    Oddly, it is not MacOS X Server that will help you out in this case, it is Apple Remote Desktop. Apple has chosen a curious mix of functions to put in a product of that name (the least of which is the remote desktop viewing part).

    With ARD it is really easy to push anything you want out to any size group of Macs that have been configured for this. For some things you need to know a few trick involving making your own packages (like that you can create a package with just scripts to run), but the learning curve is remarkably shallow.

    However, if you are trying to match group policy, then MacOS X Server, and notably the Wrokgroup Manager part of it are the way to go.
  • Re:Openness? (Score:3, Informative)

    by raddan ( 519638 ) on Friday April 27, 2007 @10:05AM (#18899783)
    People need to stop repeating this shit. It's not true. The MacOS kernel is a Mach/4.3BSD hybrid kernel, that's been injected with some FreeBSD stuff, called XNU [wikipedia.org]. It has much more in common with NeXTSTEP than it does with FreeBSD. The system doesn't even use the BSD driver model-- it uses I/OKit, which is totally different.

He has not acquired a fortune; the fortune has acquired him. -- Bion

Working...