active directory

Apple has launched its first Mountain Lion training guide and certification for IT professionals. The certification is the Mountain Lion edition of the Apple Certified Associate – Mac Integration certification, which can be viewed as the introductory Mac IT certification.

Apple began offering the certification following last year’s launch of Lion. Unlike Apple’s other certification options, Apple provides a free guide to the material on the Mac Integration Basics Exam on its training site. You can also register and take the exam online for $65. Should you fail the exam, Apple will let you retake the exam at no additional charge.

The member companies that make up the Enterprise Device Alliance announced earlier this week that all of their products have either been updated already with support for Mountain Lion or will be within a few weeks.

The Enterprise Device alliance is a consortium of companies focused on integration Apple technologies in the business and enterprise environments. The solutions offered by those member companies include Active Directory integration, Mac and iOS device management, advanced file and print integration options, mobile backup, Windows virtualization, and help desk operations.

Since the release of Snow Leopard Server three years ago, Apple has been steering its server platform away from large enterprise deployments. Instead Apple has redesigned OS X Server to meet the needs of the small to mid-size business market as well as the needs of Apple-centric departments or workgroups in larger organizations. That focus is very clear if you download and install Mountain Lion Server or look through the Mountain Lion Server documentation from Apple.

One of the transitions that Apple began in Lion and Lion Server, which were released last summer, was a move away from the traditional Mac management architecture that Apple has provided in OS X Server since it launched the platform more than a decade ago. In its place, Apple has built a management system for Macs that is very similar to the mobile management features available in iOS.

Many Mountain Lion apps will function normally under Mountain Lion, but many won’t. Of particuar concern are the various utilities that help keep Mac systems secure, scan for viruses and malware, integrate with enterprise systems in businesses and schools, and dianose and repair problems.

These tools often require much deeper integration with OS X than other apps. That means that developers need to ensure they function as intended and don’t damage any documents, files, OS X system components, or other apps. That can sometimes delay releases of key utilities.

Here’s a list of Mac utilities and enterprise tools that have confirmed Mountain Lion Compatibility

Apple is expected to launch Mountain Lion next week. At the same time, the company will be launching Mountain Lion Server. The new edition of Apple’s server platform is revolutionary in a lot of ways, not the least of which is its $19.99 price tag.

Mountain Lion Server includes the basic server functionality that you’d expect from a product intended for the small to mid-size business (SMB) market. That means features like file sharing, network printing, client backups, website hosting, VPN, email services, centralized contacts for an organization, and shared calendaring. All of that is important and Mountain Lion Server seems destined to make those services easy to set up and manage.

In addition to those basic capabilities, however, Mountain Lion Server comes with some pretty incredible functionality for businesses or workgroups of any size or type. Here are ten of the big money features that are easy to overlook.

Last week, I compared the costs of Mountain Lion Server with the licensing for Windows Server 2012 Essentials Edition. Both products are pretty clearly for the small business market. One of the big questions or concerns from readers centered around Microsoft’s Active Directory and Exchange. The assumption being that Apple didn’t provide anything similar.

That assumption, however, isn’t accurate. To clear up confusion, let’s take a look at what the core services and features in OS X Server actually offers and the audience that can best benefit from Mountain Lion Server – small businesses looking to set up a handful of services for a relatively small number of users.

Apple has added several whitepapers to its training site. All them address enterprise technologies in Lion. While many of the whitepapers have been available from Apple in the past, two of them appear to be new additions. The first of these details the use of Configuration Profiles to manage Macs running Lion as well as iOS device while the second covers 802.1X networking.

The first new whitepaper, which isn’t dated, is definitely the more interesting of the two.  It discusses Mac management as an extension of mobile device management (MDM). As we reported last week, Apple appears to be positioning Macs running Mountain Lion to be managed in the same manner as iOS devices rather than using its long-standing Managed Preferences architecture that has been built into OS X and OS X Server since their initial releases over a decade ago.

One interesting moment during last year’s WWDC keynote was when Steve Jobs said that Apple was moving beyond the digital hub strategy it had embraced for years. He talked about how our computers are no longer the hub of our digital life and said that Apple was demoting the Macs and PCs and making them just another device like an iPhone or iPad.

That message set the stage for iCloud and for cord-free iOS devices that don’t need a Mac or PC for activation, backup, or sync.

There was also a much subtler message, however, that no one really picked up on at that time. In making the Mac just another device, Apple was likely laying the groundwork to change how companies and schools manage Macs – essentially treating them as just another device and bringing the mobile device management (MDM) paradigm introduced in iOS 4 to OS X and Mac management.

WWDC may have sold out quickly, but as we reported there are alternative events for IT professionals  and developers that want to network and hone their skills. One of those is the annual European Macintosh System Administrators Meeting, which began accepting registrations this week for this year’s event, which will be held in Sweden this September.

Unlike WWDC, MacSysAdmin isn’t intended for developers as much as it is IT professionals that need to deploy and manage Apple technologies in business and education.

Recent data shows that nearly half of all companies offer or provide Macs to employees and that the Macs represent about 7% computers in the workplace. That’s according to a Forrester report that was issued last month and that prompted me to write a feature about how deploying and managing large Mac populations in enterprise environments differs significantly from supporting a handful of Macs.

In that that article, I covered a lot of the tools IT departments rely on to handle large scale Mac deployments. Knowing what those tools are is a great starting point, but there are also several key skills that IT professionals managing and/or supporting Macs in business need regardless of whether they’re dealing with a half dozen Macs or upwards of a thousand.

May is Mobile Management Month at Cult of Mac, where we will be profiling a different mobile management company every weekday. You can find all previous entries here and read our Mobile Management manifesto here.

Centrify’s DirectControl for Mobile offers free device management capabilities. Unlike many other management solutions, device management can be performed using mobile-specific Active Directory group policy extensions rather than any additional interface (though a cloud service interface is also available). Being a free solution, DirectControl for Mobile focuses on a handful of device security functionality. Centrify plans to extend the offering over the course of this year with a full featured premium edition. Although completely functional (see our review), Centrify still lists DirectControl as being a beta release. For organizations with minimal needs or limited budgets, DirectControl is a good option. Centrify also produces a Mac client management tool called DirectControl for Mac that uses Active Directory extensions for securing and managing Mac workstations.

The iPhone and iPad are great mobile work solutions for many professions and IT is no exception. With the right collection of apps, virtually every IT job role can become mobile. Systems administrators, user interface designers, and even help desk agents can use their iOS devices to keep tabs on the technologies that they manage and resolve problem at any time from almost anyplace.

IT tools for iOS cover a wide range of ground from basic remote access to network diagramming. Here are a set of tools that no IT department should be without.

Yesterday, Microsoft announced its Windows 8 product lineup. The lineup includes just three editions as opposed to Windows 7 and Vista, which offered twice as many options though some were targeted at developing and niche markets. In addition to streamlining the overall offerings, Microsoft also drew a sharper line between Windows 8 for desktop, notebook, and tablet PCs with x86/64 processors and Windows for ARM-based tablets.

If the dividing line between a full-fledged version of Windows and a version designed for low cost tablets seems vaguely familiar to you, it’s because the strategy is pretty similar to the distinction between Apple’s OS X for Macs and iOS for iPhones, iPads, and iPod touches.

In fact, the entire desktop and mobile lineup that Microsoft is developing seems to borrow pretty heavily from Apple’s playbook.

Thursby last week released ADmitMac PKI 4. The release is a specialized version of the company’s ADMit Mac software that focuses two factor authentication. The solution is largely aimed at government customers and regulated industries like healthcare where data security is paramount.

Thursby’s ADMitMac is an Active Directory integration solution that offers several features beyond the built-in Active Directory support that Apple provides in OS X. It offers Mac management capabilities, improved browsing of Windows network resources including Microsoft’s distribute file system, and a number of other administrative tools.

Last week I took a brief look at how managing a handful of Macs differs from managing dozens or hundreds or even thousands of Macs. Some readers asked how big companies like Apple, Google, Viacom, or IBM actually go about managing large numbers of Macs – both in terms of the tools they use and in terms of how their IT processes differ from supporting Macs in small businesses.

I can’t speak for how Apple manages the Macs of its thousands of employees, but I have worked with several large companies as a Mac IT professional – along with a number of schools and colleges, government agencies, and small businesses. Here’s a look at the tools and processes that they use to configure, deploy, and manage Macs on a grand scale.

Many pundits have made the argument that the iPad’s days in the business and corporate world will be numbered once Microsoft releases Windows 8 and Windows on ARM (WOA) tablets later this year. The biggest rationale behind this argument is that corporate IT departments will feel much more comfortable deploying and managing Windows devices and that they will already have the skills, tools,  and resources needed to setup, secure, and roll out Windows-powered iPad competitors.

That argument lost a lot of credibility this week when Microsoft acknowledged that WOA tablets cannot be managed like other Windows variants including Windows 8 on PCs and x86 tablets or PCs running Windows 7, Vista, or XP. This makes the iPad much more suited for business than Windows on ARM devices.

Microsoft’s Active Directory is a core component in virtually every enterprise network. When I looked at Centrify’s DirectControl for Mobile, I singled out its deep integration with Active Directory as a major feature and a leg up over some of the other mobile device management (MDM) suites on the market. That’s because Active Directory is an essential piece of technology infrastructure in the vast majority of businesses.

Despite being a Microsoft solution (and a feature of Windows Server), Active Directory is a technology that all Apple IT professionals should understand and have some skills in using. With the Xserve gone and OS X Server headed to more limited uses since the release of Lion last summer, Active Directory is becoming a de facto standard for Macs and iOS devices as much as it is for Windows PCs.

Earlier this week, Centrify launched an open beta of the company’s DirectControl for Mobile service. The service, which supports managing iPhones, iPads, and Android devices in business and enterprise settings, currently includes a subset of the features typical in other mobile device management (MDM) systems. Centrify, which is known for providing enterprise integration technologies for OS X as well as various Unix and Linux distributions, plans to maintain the current selection of controls as a free solution when the product emerges from beta while adding further management capabilities to a commercially licensed version.

Most MDM solutions are of the bolted-on variety – they run on a dedicated server or cloud offering that can pull information from enterprise systems like Microsoft’s Active Directory but use a separate management interface and data store for management profiles and other information. Centrify’s DirectControl does offer a cloud management system, but it uses Active Directory itself as the primary interface and data store, an approach that has several advantages including a very minimal learning curve for experienced systems administrators.

Some arguments about Apple never seem die despite the fact that reality has moved on. Arguments like the Mac not being compatible with Windows file sharing or disk formats and that all Apple products being inherently more expensive than any competitors. This morning, Computerworld’s Preston Gralla pulled several of these outdated arguments together to support his opinion that Apple would never unseat Microsoft in the enterprise.

Virtually every argument in this piece is easy to debunk with facts. What’s more important than responding to these outdated myths, however, is realizing that Apple doesn’t want to unseat Microsoft from its current place in the enterprise. Microsoft is actually doing a lot of enterprise heavy lifting for Apple.

Business and technology are two words that have gone together for decades. Business and Apple technology – well, not so much. Let’s face it, Apple made a name of itself by calling out “the man” and not bending to his authority. That rebellious attitude and freedom to be yourself has always typified Mac users and it’s a razor sharp contrast to the image of guys in suits with BlackBerrys and Windows-based laptops.

So, it may be surprising to realize that one in five people use Apple products in the workplace. How do you explain that? Easy. Apple is launching nothing less than a revolution of what technology means in the workplace, and the iPhone and iPad are its agents. Over the next few years, expect nothing less than the total transformation of business and the workplace after Steve Jobs’s own vision. 

The first warning shots of that revolution were fired in January 2007 when Steve Jobs announced the iPhone. Most people then didn’t realize the iPhone was going to change the business world – RIM actually sarcastically thanked Apple for creating what its executives considered a toy.

Who’s laughing now?