I am unsure if you can make it work with a modified AD schema alone. (I haven't dared try.)
But yes, you join a Mac client to Open Directory just as you would join a Windows computer to a windows Domain. It can be an "Anonymous Bind", where the mac is not added to the client list (and is only managed by the "Guest Computer" generic account) or it can be bound and given specific settings. --Matt Ross Ephrata School District ----- Original Message ----- From: De Williman, Shih [mailto:sdewilli...@g2.com] To: NT System Admin Issues [mailto:ntsysad...@lyris.sunbelt-software.com] Sent: Wed, 08 Sep 2010 07:32:25 -0700 Subject: RE: Mac and Windows mix > I believe WGM _can_ manage unbound machines, provided that you first import > them into WGM (Matt can correct if this is misinfo since we modified AD > schema & leverage AD/WGM to manage users). Even then, that in itself, > whether you do it in an strictly OD environment or Magic Triangle, is a pain > without third party utility like Passenger. > > > > -----Original Message----- > From: Ken Schaefer [mailto:k...@adopenstatic.com] > Sent: Wednesday, September 08, 2010 6:16 AM > To: NT System Admin Issues > Subject: RE: Mac and Windows mix > > Question: how does one bring a Mac under scope of management of WGM? > > For AD - the machine has to be joined to the domain. For Macs? > > Cheers > Ken > > -----Original Message----- > From: Ken Schaefer [mailto:k...@adopenstatic.com] > Sent: Wednesday, 8 September 2010 5:05 PM > To: NT System Admin Issues > Subject: RE: Mac and Windows mix > > I think sdewilliam is saying that there is no modelling capability. > > GPMC lets you pick a user, a computer and an AD site, and dynamically layers > all the policies at all levels that will affect the user, and gives you the > resulting effective settings (after group filtering, WMI filtering etc). The > advanced GPM also lets you do check-in/check-out, versioning control, > workflow etc. > > Cheers > Ken > > -----Original Message----- > From: Matthew W. Ross [mailto:mr...@ephrataschools.org] > Sent: Wednesday, 8 September 2010 2:21 PM > To: NT System Admin Issues > Subject: Re: Mac and Windows mix > > Perhaps I'm misunderstanding: Isn't that exactly what Workgroup Manager does > in Open Directory? There are plenty of settings which can be applied to > individual Macs, users, user groups and computer groups. > > ----- Original Message ----- > From: sdewilliman > [mailto:sdewilli...@g2.com] > To: NT System Admin Issues > [mailto:ntsysad...@lyris.sunbelt-software.com] > Sent: Tue, 07 Sep 2010 > 17:41:34 -0700 > Subject: Re: Mac and Windows mix > > > > Precisely, with OD /WGM there¹s no central mgmt console whereby an > > admin can tell which/what policy is applied to what group. > > Administration easily becoems a nightmare without 3rd party mgmt > > software such as Centrify. > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ > ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ > > --- > To manage subscriptions click here: > http://lyris.sunbelt-software.com/read/my_forums/ > or send an email to listmana...@lyris.sunbeltsoftware.com > with the body: unsubscribe ntsysadmin > > ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to listmana...@lyris.sunbeltsoftware.com with the body: unsubscribe ntsysadmin
