OSX Group Policy...
-
Looking for an alternative to group policy for our Apple computers. We have one Mac Pro and a dozen MacBook Pro laptops. Our contracts state we have to have computers connect to WiFi based on the PC, not based on the user. This means that auto-connect has to happen prior to CTRL+ALT+DEL (computer configuration settings in GPO) rather than after CTRL+ALT+DEL (user configuration settings in GPO)...
I've looked at Apple Configurator 2, I've looked at Profile Manager in OSX Server (server.app is currently deployed to a Mini in our colo here). I can't find anything that acts like Group Policy on the Apple side of things.
Any way I can deploy an SSID policy to these computers?
-
What about just using a script? Or a tool like Ansible or Puppet?
-
Of Chef, or SaltStack.
-
@Reid-Cooper said in OSX Group Policy...:
What about just using a script? Or a tool like Ansible or Puppet?
Pretty much the moment I brought up anything Linux based or scripting, it was shot down and I was told to find something that anyone would feel comfortable with.
I'm trying to set them up with something easy-GUI in case I leave at a moment's notice.
-
@BBigford said in OSX Group Policy...:
@Reid-Cooper said in OSX Group Policy...:
What about just using a script? Or a tool like Ansible or Puppet?
Pretty much the moment I brought up anything Linux based or scripting, it was shot down and I was told to find something that anyone would feel comfortable with.
Let us know if you find that magic fairy dust that'll let someone understand what they're doing
-
@BBigford said in OSX Group Policy...:
Pretty much the moment I brought up anything Linux based or scripting, it was shot down and I was told to find something that anyone would feel comfortable with.
None of that is Linux based, it's Mac based. Point out that BASH and scripting is the Mac way. If there is the slightest concern with that, I'd take that as meaning that they are not okay with Macs being deployed, being UNIX and all.
-
@BBigford said in OSX Group Policy...:
I'm trying to set them up with something easy-GUI in case I leave at a moment's notice.
Wrong OS for that. Windows and Linux are better for that.
-
@scottalanmiller said in OSX Group Policy...:
@BBigford said in OSX Group Policy...:
Pretty much the moment I brought up anything Linux based or scripting, it was shot down and I was told to find something that anyone would feel comfortable with.
None of that is Linux based, it's Mac based. Point out that BASH and scripting is the Mac way. If there is the slightest concern with that, I'd take that as meaning that they are not okay with Macs being deployed, being UNIX and all.
They're not okay with Macs being deployed. We're just told they will be deployed.
-
Checking this out currently...
-
@travisdh1 said in OSX Group Policy...:
@BBigford said in OSX Group Policy...:
@Reid-Cooper said in OSX Group Policy...:
What about just using a script? Or a tool like Ansible or Puppet?
Pretty much the moment I brought up anything Linux based or scripting, it was shot down and I was told to find something that anyone would feel comfortable with.
Let us know if you find that magic fairy dust that'll let someone understand what they're doing
10/10 would snort that.
-
Also got recommended Centrify. Never tried that before though.
-
Centrify is mostly an AD extender.
-
@BBigford said in OSX Group Policy...:
@scottalanmiller said in OSX Group Policy...:
@BBigford said in OSX Group Policy...:
Pretty much the moment I brought up anything Linux based or scripting, it was shot down and I was told to find something that anyone would feel comfortable with.
None of that is Linux based, it's Mac based. Point out that BASH and scripting is the Mac way. If there is the slightest concern with that, I'd take that as meaning that they are not okay with Macs being deployed, being UNIX and all.
They're not okay with Macs being deployed. We're just told they will be deployed.
Say the same thing about scripts and Ansible.
-
I think that LanDesk might be what you are looking for:
http://www.landesk.com/products/management-suite/
It handles Mac.
-
@StrongBad we had LanDesk at a large firm I used to work at, it seemed to work really well.
-
@StrongBad said in OSX Group Policy...:
I think that LanDesk might be what you are looking for:
http://www.landesk.com/products/management-suite/
It handles Mac.
I'll check that out, I checked out Centrify. Centrify told me "it isn't going to be a good fit because we require a minimum of 50 computers, and you only need to manage 5 of them."
-
Yeah, only five is going to be a problem for sure.
-
@scottalanmiller said in OSX Group Policy...:
Yeah, only five is going to be a problem for sure.
I got Profile Manager setup and configured. But it doesn't push the profile. Talking to Apple but I bet this is going to be a dead end. Also looking into LanDesk.
-
@BBigford said in OSX Group Policy...:
@scottalanmiller said in OSX Group Policy...:
Yeah, only five is going to be a problem for sure.
I got Profile Manager setup and configured. But it doesn't push the profile. Talking to Apple but I bet this is going to be a dead end. Also looking into LanDesk.
LanDesk offers self service support options, too, which are pretty sweet.
-
@scottalanmiller said in OSX Group Policy...:
@BBigford said in OSX Group Policy...:
@scottalanmiller said in OSX Group Policy...:
Yeah, only five is going to be a problem for sure.
I got Profile Manager setup and configured. But it doesn't push the profile. Talking to Apple but I bet this is going to be a dead end. Also looking into LanDesk.
LanDesk offers self service support options, too, which are pretty sweet.
2.4GB download, they're not messing around.
