Mac Mini Help!

[NokiX]

Hi All,

 

It is sad times for us as we have started to go down the route of Mac's for our music department and they have now arrived ready to be setup however we have run into issues with setting up restrictions on the Mac as we are not quite sure how to do it! We currently have the Mac's setup on the domain without any problems and we have a MDM solution which helps with some restrictions however users are still able to access things like terminal and the app store and we don't want them doing this!

 

I expect there is a way to restrict these things but I'm not sure how to go about doing this so if anyone has any suggestions or could advise how they manage Mac's it would be a great help! Also if anyone has Impero setup on a Mac if they could advise how they deploy the browser add-on to every user as I can't figure out how to do that either since it appears to be a per user installation rather than installing it to the entire system (although the Impero client itself is on the entire system and works fine).

 

Regards,

 

Chris.

[pantscat]

Do you have an OS-X server?

[NokiX]

Do you have an OS-X server?

 

Currently this isn't something we have as most of the information I found regarding the mac server mentioned it was good for managing printers and shared drives but I wasn't sure how it works with domain users. Is this something worth setting up?

[pantscat]

I was thinking that Apple Profile Manager would be a good thing to restrict apps - you can set a list of "allowed apps" and then all other apps are deemed evil and disallowed.

 

I'd think though that your MDM might let you do this... I know that some do.

[NokiX]

I was thinking that Apple Profile Manager would be a good thing to restrict apps - you can set a list of "allowed apps" and then all other apps are deemed evil and disallowed.

 

I'd think though that your MDM might let you do this... I know that some do.

 

I believe our MDM does have this feature but it only supports Apps with identifiers. I'm not sure if I'm right in thinking that programs such as Microsoft Office have those identifiers as they are not installed through the App Store but I assume I would have more control when using the Mac Server anyway since it's a product from Apple directly which usually means it has less restrictions than a 3rd party MDM solution.

[Dan_Impero]

Hi All,

 

It is sad times for us as we have started to go down the route of Mac's for our music department and they have now arrived ready to be setup however we have run into issues with setting up restrictions on the Mac as we are not quite sure how to do it! We currently have the Mac's setup on the domain without any problems and we have a MDM solution which helps with some restrictions however users are still able to access things like terminal and the app store and we don't want them doing this!

 

I expect there is a way to restrict these things but I'm not sure how to go about doing this so if anyone has any suggestions or could advise how they manage Mac's it would be a great help! Also if anyone has Impero setup on a Mac if they could advise how they deploy the browser add-on to every user as I can't figure out how to do that either since it appears to be a per user installation rather than installing it to the entire system (although the Impero client itself is on the entire system and works fine).

 

Regards,

 

Chris.

 

Hi Chris, if you'd like someone in our support team to assist with the setup of Impero browser extension on your new Macs then feel free to drop me your details via email ([email protected]) or via private message and I'll get someone to contact you.

 

Kind regards,

Daniel

[3s-gtech]

Currently this isn't something we have as most of the information I found regarding the mac server mentioned it was good for managing printers and shared drives but I wasn't sure how it works with domain users. Is this something worth setting up?

 

With Profile Manager, it directly integrates with domain users as PM contains the AD groups when set up correctly. The two systems work very nicely together, for the most part. IMO it's worth doing, to have a locally managed MDM. Many say that it's not worthwhile if you have 100+ Macs - I don't so wouldn't know on that one.