+ Post New Thread
Results 1 to 15 of 15
Mac Thread, Some help with Macs please!!! in Technical; Hi all, We've just bought 14 imacs for our music dept & i'm the lucky one that gets to install ...
  1. #1

    Join Date
    Mar 2012
    Location
    Cheshire
    Posts
    86
    Thank Post
    36
    Thanked 1 Time in 1 Post
    Rep Power
    0

    Some help with Macs please!!!

    Hi all,

    We've just bought 14 imacs for our music dept & i'm the lucky one that gets to install them. With the help of google i've managed to get them set up & on the domain, however I would like to lock them down for the student and staff users.

    At the moment when a student logs on they can see every pc in the school in finder, remove items from the doc, change their proxy settings etc...I know this is going to be a world of pain come september, so any help would be much appreciated.

    Just to mention we haven't got a mac server & the boss isn't too keen on running it on one of the iMacs in the music suite.

    Thanks
    Last edited by mike86; 26th July 2013 at 09:36 AM.

  2. #2

    rush_tech's Avatar
    Join Date
    Jul 2006
    Location
    Nottingham
    Posts
    1,408
    Thank Post
    111
    Thanked 265 Times in 201 Posts
    Rep Power
    194
    I think the cheapest way to do it is to use a mac mini with mac server installed

  3. Thanks to rush_tech from:

    mike86 (26th July 2013)

  4. #3

    Join Date
    Mar 2012
    Location
    Cheshire
    Posts
    86
    Thank Post
    36
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Thought that might be the case,if i put os x server from the app store on one of the iMacs, would it still be usable by the students or do you need a dedicated server machine?

  5. #4

    Join Date
    May 2009
    Location
    London
    Posts
    174
    Thank Post
    33
    Thanked 72 Times in 26 Posts
    Rep Power
    26
    Quote Originally Posted by mike86 View Post
    Thought that might be the case,if i put os x server from the app store on one of the iMacs, would it still be usable by the students or do you need a dedicated server machine?
    I wouldn't let a student login to the server. Most restrictions can be done from the server, although they are more difficult to lock down than windows PCs.

  6. #5

    Join Date
    Jun 2009
    Location
    Birmingham
    Posts
    600
    Thank Post
    92
    Thanked 72 Times in 64 Posts
    Rep Power
    24
    Instead of buying a Mac Mini server (which is the best way, but obviously has a cost) Have a look at Meraki as it's possible to use that to control Mac desktops as well as iPads.

  7. #6

    seawolf's Avatar
    Join Date
    Jan 2010
    Posts
    969
    Thank Post
    12
    Thanked 283 Times in 217 Posts
    Blog Entries
    1
    Rep Power
    175
    Implementing Macs without using Managed Preferences or Configuration Profiles is like having PCs with out GPOs to configure policies. I would suggest you buy a Mac Mini (used or new) and run Server.app on it. Don't try setting it up on me of the client Macs. And either do a training course on Mac server, buy a book on it, or hire someone to help. If you don't do it right you will suffer. Just as you would if you didn't know how to setup an AD server and GPOs to configure your PCs.

  8. Thanks to seawolf from:

    mike86 (26th July 2013)

  9. #7

    Join Date
    May 2009
    Location
    London
    Posts
    174
    Thank Post
    33
    Thanked 72 Times in 26 Posts
    Rep Power
    26
    Quote Originally Posted by seawolf View Post
    Implementing Macs without using Managed Preferences or Configuration Profiles is like having PCs with out GPOs to configure policies. I would suggest you buy a Mac Mini (used or new) and run Server.app on it. Don't try setting it up on me of the client Macs. And either do a training course on Mac server, buy a book on it, or hire someone to help. If you don't do it right you will suffer. Just as you would if you didn't know how to setup an AD server and GPOs to configure your PCs.
    Not gonna get much better advice than that.

  10. Thanks to APMerry from:

    mike86 (26th July 2013)

  11. #8

    Join Date
    Oct 2005
    Posts
    825
    Thank Post
    51
    Thanked 111 Times in 101 Posts
    Rep Power
    63
    Quote Originally Posted by Tricky_Dicky View Post
    Instead of buying a Mac Mini server (which is the best way, but obviously has a cost) Have a look at Meraki as it's possible to use that to control Mac desktops as well as iPads.
    This is good advice - and worth investigating if money is tight for a Mac mini server.

    When I first deployed Macs here a couple of years ago I got a Mac Mini server too and used that to configure "Managed Preferences" in order to lock down the Macs.

  12. Thanks to pantscat from:

    mike86 (26th July 2013)

  13. #9
    SovietRussia's Avatar
    Join Date
    Mar 2013
    Location
    Powys, Wales
    Posts
    607
    Thank Post
    67
    Thanked 131 Times in 102 Posts
    Rep Power
    43
    We use a Mac Mini server, but we opted to use Workgroup Manager which is an old technology for managing < Lion devices. But now-a-days, you are supposed to use Profile Manager to lock down clients.

  14. #10

    seawolf's Avatar
    Join Date
    Jan 2010
    Posts
    969
    Thank Post
    12
    Thanked 283 Times in 217 Posts
    Blog Entries
    1
    Rep Power
    175
    Quote Originally Posted by SovietRussia View Post
    We use a Mac Mini server, but we opted to use Workgroup Manager which is an old technology for managing < Lion devices. But now-a-days, you are supposed to use Profile Manager to lock down clients.
    WGM is still available for Mountain Lion (http://support.apple.com/kb/DL1567) and can be used for managing 10.8 clients instead of Profile Manager. I doubt that will continue to be an option in 10.9, but Apple will probably give us some very good reasons to finally ditch WGM in 10.9. Right now, Profiles don't quite provide all of the capabilities or reliability of the old Managed Preferences, but it looks like Profiles are about to become a bit more mature and comprehensive.

  15. #11

    seawolf's Avatar
    Join Date
    Jan 2010
    Posts
    969
    Thank Post
    12
    Thanked 283 Times in 217 Posts
    Blog Entries
    1
    Rep Power
    175
    One thing I left out of my first post is that I would also strongly recommend buying Apple Remote Desktop along with using a Mini server. ARD rocks and can be used with PC or Linux clients over VNC as well. You can do a tremendous amount with ARD including installing software, running scripts and UNIX commands and a lot more. I wish MS would give Remote Desktop even 1/10 of these features for PCs.

    http://youtu.be/TArMYl1RsUE

    http://youtu.be/zaptMf5I1xQ

  16. Thanks to seawolf from:

    mike86 (26th July 2013)

  17. #12
    SovietRussia's Avatar
    Join Date
    Mar 2013
    Location
    Powys, Wales
    Posts
    607
    Thank Post
    67
    Thanked 131 Times in 102 Posts
    Rep Power
    43
    Quote Originally Posted by seawolf View Post
    WGM is still available for Mountain Lion (Workgroup Manager 10.8) and can be used for managing 10.8 clients instead of Profile Manager. I doubt that will continue to be an option in 10.9, but Apple will probably give us some very good reasons to finally ditch WGM in 10.9. Right now, Profiles don't quite provide all of the capabilities or reliability of the old Managed Preferences, but it looks like Profiles are about to become a bit more mature and comprehensive.
    Yeah, we use WGM to manage our 10.8 clients, it seems to work fine except for Proxy support, which it seems to loose. Bit odd - We tried to switch to Profile Manager, and found LOTS of features missing, so we reverted back.

  18. #13

    Join Date
    Mar 2012
    Location
    Cheshire
    Posts
    86
    Thank Post
    36
    Thanked 1 Time in 1 Post
    Rep Power
    0
    thanks guys,

    I've put the server apps on one of the iMacs to have a "play" & booked on a course in August.

    Had a look at the meraki seems ok for iOS but couldn't really see a way of locking down macs, unless I'm looking in the wrong place?!

  19. #14

    Join Date
    Mar 2012
    Location
    Cheshire
    Posts
    86
    Thank Post
    36
    Thanked 1 Time in 1 Post
    Rep Power
    0
    Is there any reason (other than the obvious, its a server don't let kids near it) why not to keep this on a client machine?

  20. #15

    seawolf's Avatar
    Join Date
    Jan 2010
    Posts
    969
    Thank Post
    12
    Thanked 283 Times in 217 Posts
    Blog Entries
    1
    Rep Power
    175
    Quote Originally Posted by mike86 View Post
    Is there any reason (other than the obvious, its a server don't let kids near it) why not to keep this on a client machine?
    Can you guarantee that your chosen client (server) machine will never be turned off? Will it have UPS protection and be backed up regularly? What if you need to make client config changes while the iMac is in use, could you? Would you ever consider doing this in a Windows environment?

    If the answer is no to ANY of these questions then there is your answer.

  21. Thanks to seawolf from:

    mike86 (30th July 2013)

SHARE:
+ Post New Thread

Similar Threads

  1. BYOD VLAN - Some help with VLAN tagging please
    By robknowles in forum Wired Networks
    Replies: 1
    Last Post: 8th September 2012, 09:03 AM
  2. [Fog] Need fog help with multicast please :)
    By bart21 in forum O/S Deployment
    Replies: 3
    Last Post: 3rd November 2011, 06:36 PM
  3. Replies: 2
    Last Post: 10th October 2009, 11:12 PM
  4. Can someone give me some help with getting LanView3 working?
    By boomam in forum Network and Classroom Management
    Replies: 19
    Last Post: 10th June 2008, 02:40 PM
  5. Replies: 11
    Last Post: 7th March 2008, 02:28 PM

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •