You either extend the schema with the needed attributes or bind (in addition to AD) to an OpenDirectory server (an OSX Server running Open Directory). If said OpenDirectory server is also bound to AD then you can create objects on it that just augment an existing AD objects for mac (Management Preferences) management.
-Anders On Wed, Sep 8, 2010 at 12:15 PM, Ken Schaefer <[email protected]> wrote: > Question: how does one bring a Mac under scope of management of WGM? > > For AD - the machine has to be joined to the domain. For Macs? > > Cheers > Ken > > -----Original Message----- > From: Ken Schaefer [mailto:[email protected]] > Sent: Wednesday, 8 September 2010 5:05 PM > To: NT System Admin Issues > Subject: RE: Mac and Windows mix > > I think sdewilliam is saying that there is no modelling capability. > > GPMC lets you pick a user, a computer and an AD site, and dynamically > layers all the policies at all levels that will affect the user, and gives > you the resulting effective settings (after group filtering, WMI filtering > etc). The advanced GPM also lets you do check-in/check-out, versioning > control, workflow etc. > > Cheers > Ken > > -----Original Message----- > From: Matthew W. Ross [mailto:[email protected]] > Sent: Wednesday, 8 September 2010 2:21 PM > To: NT System Admin Issues > Subject: Re: Mac and Windows mix > > Perhaps I'm misunderstanding: Isn't that exactly what Workgroup Manager > does in Open Directory? There are plenty of settings which can be applied to > individual Macs, users, user groups and computer groups. > > ----- Original Message ----- > From: sdewilliman > [mailto:[email protected]] > To: NT System Admin Issues > [mailto:[email protected]] > Sent: Tue, 07 Sep 2010 > 17:41:34 -0700 > Subject: Re: Mac and Windows mix > > > > Precisely, with OD /WGM there¹s no central mgmt console whereby an > > admin can tell which/what policy is applied to what group. > > Administration easily becoems a nightmare without 3rd party mgmt > > software such as Centrify. > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to [email protected] > with the body: unsubscribe ntsysadmin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
