Mac Thread, Would I need a Mac Server? in Technical; We are thinking about putting half a dozen Mac's into our windows domain. I have read that I can join ...
13th June 2009, 09:44 AM #1
Would I need a Mac Server?
We are thinking about putting half a dozen Mac's into our windows domain. I have read that I can join the macs to authenticate on active directory, get mapped drives so I wouldnt need a Mac server for users?? Also Would those macs be able to go out through our exsisting ISA server??
Would all a mac server be good for is locking down the Mac's?
13th June 2009, 10:34 AM #2
I have looked into putting MACs on our windows network this year too. I am not an expert in this topic but I don't think you need a xserve etc for the AD integration - I however will probably use a mac mini as a server to deal with locking the MACs down.
13th June 2009, 11:23 AM #3
Was not looking at an xserve as they are too expensive also thought about a mini with the server OS installed.
13th June 2009, 12:12 PM #4
We found that the mac os x server is needed for the apple equivelent of Group policy, you could get the macs to authenticate to the domain without, but with no control over the desktops etc.
13th June 2009, 12:26 PM #5
As others have said, you only need the server to lock them down. As for ISA it wont be a problem at all.
17th June 2009, 03:58 PM #6
- Rep Power
Yep, macs will now intergrate fine with active directory to authenticate users but to have 'group policy's on the mac to lock them down etc you will need a mac server. if you only have a small amount of macs you wish to integrate you can easily do the locking down with a mac mini running osx server which is a much cheaper option than an xserve and works just as well provided your only putting in a small number of macs.
17th June 2009, 10:05 PM #7
- Rep Power
You do not need a Mac running OS 10 Server. I won't go into too much detail as I am a bit strapped for time but I'd suggest checking this article out as I found it very useful.
30th June 2009, 10:32 AM #8
Thanks for this, I did try installing it on OS X but just get a huge amount of different errors when trying to do any task.
Originally Posted by maxshanly
30th June 2009, 07:45 PM #9
You could also extend the AD schema if you are that way inclined. This then allows you to use the WGM tools to configure your Policies for your users and OS X clients and save them directly into your AD Schema. This method is also free
30th June 2009, 08:09 PM #10
There are some new whitepapers for this from apple and a very nice tutorial video. I will be attempting schema extension again soon. I've managed to get most things working in the past trials but not computer groups - now essential for 10.5, the new guides tell you how to create these groups in AD manually now.
Originally Posted by HodgeHi
1st July 2009, 09:50 AM #11
So in an ideal world what would be the best soulution? To bind a mac client to AD for authentication then extend the AD scheme to manage and lock down the client? Or to use AD for authentication then use an OS X Server to lock down the apple clients?
1st July 2009, 10:07 AM #12
I think that depends on 2 things.
1, Most admins don't like extending schemas in case of any problems. I think that in Server 2000 schema changes were non-reversible so if you messed it up then you were stuck with the changes and they got replicated across the domain/forest. With server 2003 AD this is not the case and schema changes can be reversed. I'm sure i read that somewhere. So it depends on how comfortable with this you are.
2, Cost. The AD schema extension doesn't cost a bean apart from your time, whereas the XServe does cost. It costs a fair bit. But what you do get is the ability to utilise some of the services that come with the server software. For example, if you currently do not have a mail server then you could utilise the mail service, which also has no CAL costs associated to it meaning as many accounts as you want. You maybe could utilise the Jabber service to provide your users with the ability to use IM internally and also keep a log of conversations, thus securing and adhering to policies. You may also wish to utilise the Apache service to host a shared calendar or even a wiki. The wiki server isn't the best version but it is indeed very simple to use.
We went for the Xserve here as we could utilise most if not all of the services.
Also you get the ability to netboot/netinstall. If you have quite a few machines or are looking to expand on the number of macs you have then this could be very useful.
1st July 2009, 10:08 AM #13
At the moment we do the second, if the extensions can be convinced to work this time we will use AD for both (the xml prefs will be stored in AD the same way as OD). The only thing we need os x server for would be the disk imaging.
Originally Posted by AlexPilot
Last edited by DMcCoy; 1st July 2009 at 10:10 AM.
1st July 2009, 10:08 AM #14
Do you have any links to these?
Originally Posted by DMcCoy
I would be greatly interested on how it has developed since the last time i saw.
1st July 2009, 10:54 AM #15
The xserver would be an unneccesary cost for us with only 16 machines so we are going to do what others have suggested and buy a mac mini and put the server OS onto that.
Originally Posted by HodgeHi
Last Post: 3rd June 2009, 05:29 PM
By rush_tech in forum Mac
Last Post: 5th May 2009, 11:47 PM
Last Post: 26th February 2009, 04:28 PM
Last Post: 15th December 2008, 06:28 PM
Last Post: 23rd May 2007, 12:44 PM
Users Browsing this Thread
There are currently 1 users browsing this thread. (0 members and 1 guests)