staff own MacBook as client

[R06]

Hello

 

So I have a staff member who would like to use his own Mac on the school network. I don't mean just on a byod network, but as a device with standard access to network shares and printers on the network. He is ok with us re-imaging/re-installing the unit and 'locking it down' for the duration of his contract here.

 

Can anyone see any problems here?

 

Thanks.

[abillybob]

Have you got a Mac Server?

[Domino]

I think you're setting yourself up to be responsible for a bit of kit you don't own here.

 

You're also setting precedence for others to do the same - my response would be that they can use it with any BYOD systems, but other than that they use issued hardware.

[R06]

@abillybob

 

Yes. So the Macs talk to Open Directory and Active Directory.

[DalekSec]

I think you're setting yourself up to be responsible for a bit of kit you don't own here.

 

You're also setting precedence for others to do the same - my response would be that they can use it with any BYOD systems, but other than that they use issued hardware.

 

Totally agree with this, we don't allow staff to buy their own laptops etc. we provide them all with a laptop and ipad then they all have the same and no arguing that Person 1 has a better laptop and I got this heap of ****. This goes for all kit including printers. Let one person buy their own stuff and you open a flood gate within 2 years you will have a lot of different models and it will be a royal pain in the backside

Edited February 10, 2015 by DalekSec

[abillybob]

@abillybob

 

Yes. So the Macs talk to Open Directory and Active Directory.

 

Ok sounds like you can manage it perfectly fine so yes should be fine but don't let him dictate to you what they should and shouldn't have rights to, make very clear it means they can't have the admin password and will have to ask you if they want something installing etc.

 

Also be sure that your happy with giving away licenses etc for software owned by the school because if he leaves and takes that laptop with him there's little you can do to remove the software.

 

To be honest I'd advise you let him use it and set up a SSL login page as a BYOD device but obviously it's down to you. Good luck.

[Huddlestone92]

Also be sure that your happy with giving away licenses etc for software owned by the school because if he leaves and takes that laptop with him there's little you can do to remove the software.

 

If he was to leave without you removing the software, as long as it is enrolled as a device in profile manager surely you could just lock the device?

[TechMonkey]

I agree with Domino. Maybe look at RDS so he can do everything from his Mac via BYOD, there is a working free remote client from MS now. It is a massive chunk of time and effort to get Macs on the network, all for one person who wants to be unique.

[Quackers]

You could just join it to the domain, takes all of 2 minutes. Then create him a few aliases to network shares. Simple done. When at home log on locally like its his own mac, when in school logon with domain user so he/she can access shares without being prompted for credentials.

 

or just create aliases on his mac and just tell him to enter username and password when prompted.

 

Either way i would set com.apple.desktopservices DSDontWriteNetworkStores true so the Mac does not write random files over your shared areas.

 

Either way a hassle free 5 minute job.