Managing Mac's

[portseven]

We have a couple of Apple Macs on site here, and they are a bit of a pain. Basically they have full admin access, install what they like and we have no-clue whats on there.

I want to change that and get them locked down to a sensible level, take away their admin access and use SMS to have a look what tulipe they have installed.

Anyone done this in a Windows / AD shop? I have found a package that claims to help do this..

http://www.quest.com/quest-management-xtensions-for-sms/

Any war stories on managing Mac's using this or other tools?

 

[NickFitz]

Not sure if it's relevant to your situation, but Slashdot had some links that might be useful a few days ago.

OT: As your post mentions both Macs and Windows, it is of course incumbent upon me to suggest that you get rid of the Windows boxes and switch everybody to Macs, thereby solving all your problems

 

[Moscow Mule]

Never used Macs in a work environment - too risky for most banks, but have been all-Mac at home for the last few years.

You whould be aware that admin access in OSX is akin to Root in Unix/Linux so you wouldn't want to be running that as your everyday user anyway.

It's very easy to create profiles with limited access, not sure about remotely though.

 

[MarillionFan]

Use Fusion.

 

[soleside]

It's very easy to create profiles with limited access, not sure about remotely though.

I think this is the quickest and easiest solution

 

[Peter Loew]

Never used Macs in a work environment - too risky for most banks, but have been all-Mac at home for the last few years.

You whould be aware that admin access in OSX is akin to Root in Unix/Linux so you wouldn't want to be running that as your everyday user anyway.

I don't think that's true. Admin is different to root access I'm sure.