1

Integrating Macs into a Microsoft Integrating Macs into a Microsoft Windows / Active Directory Windows / Active Directory EnvironmentEnvironment

Created and Presented by:Created and Presented by:Rand Morimoto, Ph.D., MCSERand Morimoto, Ph.D., MCSEAuthor, “Unleashed”Author, “Unleashed”--series / series / SamsSams PublishingPublishingPresident, Convergent ComputingPresident, Convergent Computinghttp://www.cco.comhttp://www.cco.comSeminar content: http://www.cco.com/online.htmSeminar content: http://www.cco.com/online.htm

TopicsTopicsUnderstanding Apple Systems and OS/XUnderstanding Apple Systems and OS/XWindows User Guide to the Mac Operating SystemWindows User Guide to the Mac Operating SystemAccessing Files and Printers on a Windows SystemAccessing Files and Printers on a Windows SystemJoining a Mac to Microsoft Active DirectoryJoining a Mac to Microsoft Active DirectoryAccessing Microsoft Exchange, SharePoint, and Accessing Microsoft Exchange, SharePoint, and g g , ,g g , ,OCS Instant Messaging from a MacOCS Instant Messaging from a MacIntegrating Integrating iPhonesiPhones into Exchangeinto ExchangeRunning Windows Apps from a MacRunning Windows Apps from a MacEnabling AD Group Policies on a MacEnabling AD Group Policies on a MacPatching / Managing / Supporting MacsPatching / Managing / Supporting MacsBacking up Mac SystemsBacking up Mac Systems

DesktopsDesktopsMacProMacPro (server): 4(server): 4--8 core, up to 32gb RAM, 4 SATA drive bays, 8 core, up to 32gb RAM, 4 SATA drive bays,

dual NIC, writable DVDdual NIC, writable DVD(8(8--core, 2gb, 320gb HD, dual NIC, writable DVD $2,799)core, 2gb, 320gb HD, dual NIC, writable DVD $2,799)

iMac (all in one desktopiMac (all in one desktop): 20): 20--24” display, 24” display, 3ghz3ghz Core2Duo, 2Core2Duo, 2--4gb RAM, 500gb4gb RAM, 500gb --3ghz3ghz Core2Duo, 2Core2Duo, 2 4gb RAM, 500gb 4gb RAM, 500gb 1TB disk 1TB disk (20”, 2.66ghz Core2Duo,(20”, 2.66ghz Core2Duo, 2gb, 320gb 2gb, 320gb HD, writable DVD $1,499)HD, writable DVD $1,499)

MacMiniMacMini, 1.83ghz , 1.83ghz Core2Duo, 1gb, Core2Duo, 1gb, 80gb HD, Combo 80gb HD, Combo drive $599drive $599

LaptopsLaptopsMacBookMacBook Pro (silverPro (silver coloredcolored): 15”): 15”--17” screen, 2.4ghz17” screen, 2.4ghz –– 2.6ghz 2.6ghz

Core2Duo,Core2Duo, up to 4gb RAM, 128gbup to 4gb RAM, 128gb--320gb HD, writable DVD320gb HD, writable DVD(15”, 2.4ghz,(15”, 2.4ghz, 2gb, 250gb HD 2gb, 250gb HD $1,999)$1,999)

MacBookMacBook (black or white (black or white colored (now silver too)colored (now silver too)): ): 13” screen, 2.0ghz13” screen, 2.0ghz –– 2.4ghz Core2Duo,2.4ghz Core2Duo, up to 2gb up to 2gb RAM, 120gbRAM, 120gb--250gb HD, writable DVD250gb HD, writable DVD(13”, 2ghz,(13”, 2ghz, 2gb, 160gb HD 2gb, 160gb HD $1,299)$1,299)(13”, 2.1ghz, 1gb, 120gb HD $999 (white only))(13”, 2.1ghz, 1gb, 120gb HD $999 (white only))

MacBookMacBook ((silversilver): .76” thick, 3): .76” thick, 3--lbs, 13” screen, lbs, 13” screen, 1.6ghz1.6ghz –– 11.86ghz Core2Duo,.86ghz Core2Duo, 2gb RAM, 120gb 2gb RAM, 120gb HD ($1,799) or 128gb Solid State ($2,499)HD ($1,799) or 128gb Solid State ($2,499)

Mac Operating System (OS X)Mac Operating System (OS X)

OSOS XX 1010..66 “Snow“Snow Leopard”Leopard” currentlycurrently inin BetaBetaOSOS XX 1010..55 “Leopard”“Leopard” waswas releasedreleased onon OctoberOctober 2626,, 20072007..OSOS XX 1010..44 “Tiger”“Tiger” waswas releasedreleased onon AprilApril 2929,, 20052005..OSOS XX 1010..33 “Panther”“Panther” waswas releasedreleased onon OctoberOctober 2424,, 20032003..OSOS XX 1010..22 “Jaguar”“Jaguar” waswas releasedreleased onon AugustAugust 2424,, 20022002..gg gg ,,OSOS XX 1010..11 waswas releasedreleased onon SeptemberSeptember 2525,, 20012001..OSOS XX 1010..00 waswas releasedreleased onon MarchMarch 2424,, 20012001..PriorPrior toto OSOS X,X, AppleApple hadhad OSOS 99,, OSOS 77,, etcetc……

Each rev of Mac OS X has minor releases, currently (as of Jan/09) Each rev of Mac OS X has minor releases, currently (as of Jan/09) the latest release is 10.5.6 (or the 6the latest release is 10.5.6 (or the 6thth patch/rev level of patch/rev level of Leopard…)Leopard…)

PowerPC PowerPC vsvs Intel ChipsetIntel ChipsetStarting in January 2006, Apple switched from the Starting in January 2006, Apple switched from the (proprietary) PowerPC chip to the more industry (proprietary) PowerPC chip to the more industry standard Intel standard Intel CoreDuoCoreDuo chipchipWith an Intel chip, Mac’s now have the ability of With an Intel chip, Mac’s now have the ability of running Windows “natively” not just in an running Windows “natively” not just in an emulated operating spaceemulated operating spaceemulated operating spaceemulated operating spaceApple provides “Apple provides “BootCampBootCamp” that allows a Mac to ” that allows a Mac to boot either in boot either in MacOSMacOS or to Windows (hold down or to Windows (hold down the Alt/Option button when you power on the the Alt/Option button when you power on the system to choose OSs)system to choose OSs)33rdrd party emulation packages (Parallels or party emulation packages (Parallels or VmwareVmware Fusion) now run within the Fusion) now run within the MacOSMacOS but at but at core native processing speedcore native processing speed

2

DesktopDesktop DockDockThis is where you put shortcuts to This is where you put shortcuts to commonly used applications.commonly used applications.Add an application to the dockAdd an application to the dock

Drag the application icon from the finder to the dockDrag the application icon from the finder to the dockRemove an application from the dockRemove an application from the dock

Drag the application icon off the dockDrag the application icon off the dockOpen an applicationOpen an application

Single clickSingle clickRightRight--click on the dock or application icon for another menuclick on the dock or application icon for another menuChange dock location and sizeChange dock location and sizeChange dock location and sizeChange dock location and size

“System Preferences”, then “dock”“System Preferences”, then “dock”Note that open applications have a small black triangle or colored dot Note that open applications have a small black triangle or colored dot under the dock icon. This is true even if all the windows are minimized.under the dock icon. This is true even if all the windows are minimized.Click on an application icon to bring all of that application’s windows to Click on an application icon to bring all of that application’s windows to the frontthe front

The Trash Can (Recycle Bin)The Trash Can (Recycle Bin)

The Dock also contains the trash can (seen The Dock also contains the trash can (seen here with trash in it), empty by using the here with trash in it), empty by using the mouse to Right+Click on the trash can icon, mouse to Right+Click on the trash can icon, then choose Empty Trash from the menuthen choose Empty Trash from the menuthen choose Empty Trash from the menu.then choose Empty Trash from the menu.

How to find thingsHow to find things

The “Finder” on the MacThe “Finder” on the MacNew FolderNew FolderPrintPrintOpenOpenGet Info (“properties”)Get Info (“properties”)Make Alias / DuplicateMake Alias / DuplicateMove to TrashMove to TrashCopy/Cut/PasteCopy/Cut/Paste

Home DirectoryHome Directory Your home directory is Your home directory is where your personal where your personal files are keptfiles are keptYour home directory is Your home directory is where you should store where you should store your files. your files. “Documents,” “Desktop “Documents,” “Desktop folder ” and “Pictures”folder ” and “Pictures”folder, and Pictures folder, and Pictures are actually in your are actually in your home directory.home directory.

DeviceDevicePlacesPlaces

DesktopDesktop{username}{username}ApplicationsApplicationsDocumentsDocuments

Applications / UtilitiesApplications / Utilities

Common ApplicationsCommon Applications

Common OS X applications you should be Common OS X applications you should be aware of:aware of:

Safari: default Mac Internet browserSafari: default Mac Internet browserSpotlight, the builtSpotlight, the built--in search tool, find anything, in search tool, find anything, anywhere, even an email messageanywhere, even an email messageiTunes, just like on a PC, plays music / videos / iTunes, just like on a PC, plays music / videos / syncs with iPodsyncs with iPodMac Mail, builtMac Mail, built--in email application (POP3 / IMAP)in email application (POP3 / IMAP)

3

Close Buttons are on the Upper Close Buttons are on the Upper Left of a WindowLeft of a Window

The three buttons are The three buttons are x (red) for Closex (red) for Close-- (yellow) for Minimize or Hide(yellow) for Minimize or Hide+ (green) to Maximize+ (green) to Maximize

Expose and Spaces (enabled in System Expose and Spaces (enabled in System Preferences) Provide a “Windowed” DesktopPreferences) Provide a “Windowed” Desktop

F9 Key (or fnF9 Key (or fn--F9 on laptop) shows allF9 on laptop) shows all open applicationsopen applicationsF10 Key (or fnF10 Key (or fn--F10F10 on laptop) on laptop) highlights active windowhighlights active windowF11 Key hides all windows and shows you the desktopF11 Key hides all windows and shows you the desktopF12 Key brings up time/date, calendar, calculatorF12 Key brings up time/date, calendar, calculator

Ejecting a CD/DVD / Opening Drive DoorEjecting a CD/DVD / Opening Drive Door1.1. Press the Eject button on the keyboardPress the Eject button on the keyboard2.2. Right click the CD/DVD icon on the desktop and Right click the CD/DVD icon on the desktop and

choose to Ejectchoose to Eject3.3. Drag/drop the CD/DVD icon onto the TrashcanDrag/drop the CD/DVD icon onto the Trashcan4.4. Hold the Eject button down when powering on Hold the Eject button down when powering on

the computer to eject the CD/DVD on bootthe computer to eject the CD/DVD on boot upupthe computer to eject the CD/DVD on bootthe computer to eject the CD/DVD on boot--upup

Screenshots on the MacScreenshots on the Mac1.1. Full Desktop to File: CommandFull Desktop to File: Command--ShiftShift--332.2. Full Desktop to Clipboard: CommandFull Desktop to Clipboard: Command--CtrlCtrl--333.3. Partial Capture to File: CommandPartial Capture to File: Command--ShiftShift--444.4. CaptureCapture Specific Application: CommandSpecific Application: Command--ShiftShift--4 4

SpacebarSpacebar

Apple MenuApple Menu

Menu bar at the top of Menu bar at the top of the screen changes the screen changes based on which based on which application is activeapplication is active

Apple men is al a sApple men is al a sApple menu is always Apple menu is always there. It has several there. It has several important toolsimportant tools

Force QuitForce QuitRestartRestartLog outLog out

System PreferencesSystem Preferences(This is the Mac Version of Control Panel)(This is the Mac Version of Control Panel)

Systems preferences also allows a user to:Change Desktop & Screensaver settingsChange the Date and TimeChange the Display resolution

Including int/ext monitorsIncluding int/ext monitorsAdd a printerManage user accountsBackup the Mac (Time Machine!)Sharing (files, system)Network (ethernet, wireless, VPN)

Network Network Information such as Information such as Ethernet and IP Ethernet and IP addresses are addresses are displayed.displayed.Network connections Network connections can also be configured can also be configured (i.e. static or DHCP).(i.e. static or DHCP).Under show, the Under show, the adapter can be adapter can be selected.selected.Can also setup a PPTP Can also setup a PPTP or L2TP VPN or L2TP VPN connection to a connection to a Windows RRAS server Windows RRAS server for remote VPN accessfor remote VPN access

4

ApplicationsApplicationsThe applications folder contains a list and links to a lot of The applications folder contains a list and links to a lot of useful programs on the Mac.useful programs on the Mac.Browsers, mail clients. Browsers, mail clients. Internet connect for creating VPN connections.Internet connect for creating VPN connections.Other Applications such as Microsoft Word.Other Applications such as Microsoft Word.ppppSome useful programs such as calculator, Some useful programs such as calculator, stickiesstickies..Games i.e. chessGames i.e. chessThe Application folder also contains the The Application folder also contains the UtilitiesUtilities Folder.Folder.

Utilities FolderUtilities FolderDisk utility Disk utility –– drive partitioning, formatting HD or USB drivesdrive partitioning, formatting HD or USB drivesKeychain Access Keychain Access –– for saving passwordsfor saving passwordsCPU monitorCPU monitorPrint Center Print Center –– adding a printeradding a printerTerminal Terminal –– Unix promptUnix promptDirectory Utility Directory Utility –– connect to ADconnect to AD

Other Common TasksOther Common Tasks

Printing: File > Print (or Command P)Printing: File > Print (or Command P)Downloaded files end up in the “Download” folder Downloaded files end up in the “Download” folder off your home directoryoff your home directoryUpdates: Apple Menu > Software UpdateUpdates: Apple Menu > Software UpdateCreating New Folders: Sit in a folder or on the Creating New Folders: Sit in a folder or on the Desktop, do File > New FolderDesktop, do File > New Folder

Q: Why can’t I create a folder on an NTFS USB drive I Q: Why can’t I create a folder on an NTFS USB drive I just plugged into my Mac? A: Because the Mac OS just plugged into my Mac? A: Because the Mac OS (out of the box) will only read NTFS drives, will not (out of the box) will only read NTFS drives, will not allow you to write to them (BUT, you can get a plugallow you to write to them (BUT, you can get a plug--in in to add to the Mac to read/write NTFS)to add to the Mac to read/write NTFS)

Basic Mac Integration into a Windows EnvironmentBasic Mac Integration into a Windows Environment

Reading / Writing to NTFS VolumesReading / Writing to NTFS Volumes

By default, the Mac OS (Leopard) will read NTFS By default, the Mac OS (Leopard) will read NTFS drives, but will NOT write to NTFS drives.drives, but will NOT write to NTFS drives.To fix this, download 2 free appsTo fix this, download 2 free apps

MacFuseMacFuse ((http://code.google.com/p/macfuse/http://code.google.com/p/macfuse/) ) –– which is which is a base underlying driver applicationa base underlying driver applicationNTFSNTFS--3G for Mac OS X (3G for Mac OS X (http://macntfshttp://macntfs--3g.blogspot.com/3g.blogspot.com/) ) –– which is the application that allows read/write of NTFS which is the application that allows read/write of NTFS volumesvolumes

(note: there are many other free (and for cost) utilities (note: there are many other free (and for cost) utilities available like Paragon, etc, but NTFSavailable like Paragon, etc, but NTFS--3G is free and 3G is free and it works great)it works great)

Accessing a Windows Server ShareAccessing a Windows Server Share

In Mac FinderIn Mac FinderGo > Connect to ServerGo > Connect to Serversmb://server/sharesmb://server/share

5

What Happens if you Can’t Logon to a What Happens if you Can’t Logon to a Windows Server? (access error)Windows Server? (access error)

1.1. Make sure your DNS is pointing to a DNS server that Make sure your DNS is pointing to a DNS server that knows about your Windows server (knows about your Windows server (ieie: point to a : point to a Windows DNS server as primary DNS)Windows DNS server as primary DNS)

2.2. Try using a fully qualified DNS name (Try using a fully qualified DNS name (ieie: : ad2008.companyabc.comad2008.companyabc.com\\filesharefileshare))

3.3. Drop to a terminal (Drop to a terminal (unixunix) shell and make sure you can ) shell and make sure you can ping the server you are trying to accessping the server you are trying to accessC ld b (lik l ) th t Wi d i t t i di it llC ld b (lik l ) th t Wi d i t t i di it ll4.4. Could be (likely) that Windows is set to require digitally Could be (likely) that Windows is set to require digitally signed secured access. If so:signed secured access. If so:

A.A. Dumb down Windows security on fileserverDumb down Windows security on fileserveri.i. HKEY_LOCAL_MACHINE HKEY_LOCAL_MACHINE \\ System System \\ CurrentControlSetCurrentControlSet \\ Services Services \\

LanManServerLanManServer \\ Parameter Parameter \\ RequireSecuritySigantureRequireSecuritySiganture (set to 0)(set to 0)ii.ii. If fileserver is a GC or DC, then set AD GPO: Domain Controller Security If fileserver is a GC or DC, then set AD GPO: Domain Controller Security

Policy > Security Options > Microsoft Network Server: Digitally Sign Policy > Security Options > Microsoft Network Server: Digitally Sign Communications (disable)Communications (disable)

B.B. Use 3Use 3rdrd party addparty add--in (note: while NTFSin (note: while NTFS--3G and “Connect to 3G and “Connect to Server” will allow read / write access to normal Windows shares, Server” will allow read / write access to normal Windows shares, you need a 3rd party tool like you need a 3rd party tool like ADmitMacADmitMac to read/write to to read/write to Microsoft DFS shares or digitally signed security shares Microsoft DFS shares or digitally signed security shares -- More More on this later…on this later…

Printing to Network PrintersPrinting to Network Printers1.1. File > Print will print to a printerFile > Print will print to a printer2.2. Mac’s can natively print to HP Mac’s can natively print to HP JetDirectJetDirect and Internet Printing and Internet Printing

Protocol (IPP) printers (or Mac’s also have a feature called “Bonjour” Protocol (IPP) printers (or Mac’s also have a feature called “Bonjour” that broadcasts out to the network to “find” devices, and any Bonjour that broadcasts out to the network to “find” devices, and any Bonjour compliant printer will automatically show up on the Mac without compliant printer will automatically show up on the Mac without having to do printer configurationshaving to do printer configurations

3.3. If you need to manually If you need to manually configure a printerconfigure a printer

A.A. Go to System Preferences > Go to System Preferences > Print & FaxPrint & Fax

B.B. Make sure lock is unlocked, Make sure lock is unlocked, then click the + buttonthen click the + button

C.C. Choose IPP or HP DirectChoose IPP or HP DirectD.D. Enter in IP Address of the Enter in IP Address of the

printerprinterE.E. Give the printer a name, and Give the printer a name, and

choose the printer driver, click choose the printer driver, click ADDADD

F.F. (right click to make a printer a (right click to make a printer a default printer)default printer)

Printing to Network Printers (Printing to Network Printers (con’tcon’t))4.4. To change printer settings (To change printer settings (ieie: :

print 2 sided, add cover page, print 2 sided, add cover page, print landscape, etc), set your print landscape, etc), set your settings when you File > Print settings when you File > Print (click on the Copies / Pages (click on the Copies / Pages button)button)

55 After you make the layout / paperAfter you make the layout / paper5.5. After you make the layout / paper After you make the layout / paper handling / paper feed / etc handling / paper feed / etc changes you want, click on the changes you want, click on the “Presets” and choose to “Save “Presets” and choose to “Save As” the settings and call it (As” the settings and call it (ieie: two : two sided or landscape or legal paper sided or landscape or legal paper or etc).or etc).

6.6. Any time you File > Print in the Any time you File > Print in the future, just choose a preset…future, just choose a preset…

Joining a Mac to Active DirectoryJoining a Mac to Active Directory

Why?Why?Active Directory password policies will now apply to the Active Directory password policies will now apply to the Mac user logging into a Mac (Mac user logging into a Mac (ieie: change every 30: change every 30--days, force upper/lower case, force complex days, force upper/lower case, force complex passwords, etc)passwords, etc)U l AD h d ’ d iU l AD h d ’ d iUser logs on to AD so they don’t need to enter in User logs on to AD so they don’t need to enter in credentials to access credentials to access smbsmb:// driver shares anymore:// driver shares anymoreUser doesn’t have to enter logon to print to Windows User doesn’t have to enter logon to print to Windows print sharesprint sharesUser doesn’t have to enter logon info to access User doesn’t have to enter logon info to access Exchange email through Entourage or the likeExchange email through Entourage or the likeMore on group policy enforcement laterMore on group policy enforcement later

Joining a Mac to Active Directory (Joining a Mac to Active Directory (con’tcon’t))Make sure Mac DNS is pointing to Microsoft Active Directory DNS so Make sure Mac DNS is pointing to Microsoft Active Directory DNS so that the Mac will find the AD global catalog and other AD objectsthat the Mac will find the AD global catalog and other AD objectsApplications folder / Utilities folderApplications folder / Utilities folderLaunch “Directory Utility”Launch “Directory Utility”Click the “lock” to unlockClick the “lock” to unlockso changes can be madeso changes can be madeClick + and choose ADClick + and choose ADEnter the domain nameEnter the domain namealong with admin credentialsalong with admin credentialsggClick OK to join ADClick OK to join AD

Once joined, user logs onOnce joined, user logs onas user@domain.comas user@domain.comjust as a Windows userjust as a Windows user

Tip:Tip:Make sure to disable autoMake sure to disable auto--logonlogon

Apple Menu > System Preferences > Accounts > Disable AutoApple Menu > System Preferences > Accounts > Disable Auto--LogonLogon

Completely Unrelated: When in the “Directory Utility”, click on the menu Completely Unrelated: When in the “Directory Utility”, click on the menu “Edit” / “Enable Root User” to enable Unix shell super user on the Mac“Edit” / “Enable Root User” to enable Unix shell super user on the Mac

Apple Mac’s Accessing Exchange Email, SharePoint, and OCS Instant Messaging

Apple Mac’s Accessing Exchange Email, SharePoint, and OCS Instant MessagingInstant MessagingInstant Messaging

6

Ways to Access Exchange from a MacWays to Access Exchange from a MacMacMailMacMail (built in email Client on a Mac)(built in email Client on a Mac)Entourage 2008 (part of Office for Mac 2008)Entourage 2008 (part of Office for Mac 2008)Outlook Web Access 2007Outlook Web Access 2007Terminal Services (RDP) clientTerminal Services (RDP) clientWindows emulation (Windows emulation (ieie: Parallels / VMware: Parallels / VMwareWindows emulation (Windows emulation (ieie: Parallels / VMware : Parallels / VMware Fusion) on Mac to run Outlook 2007 / 2003 in a Fusion) on Mac to run Outlook 2007 / 2003 in a Windows session on the MacWindows session on the Mac

Mail Client BuiltMail Client Built--in to Mac OS Xin to Mac OS X

Configurable to access Exchange (2003 / 2007)Configurable to access Exchange (2003 / 2007)Synchronizes content, but limited “interaction” with Synchronizes content, but limited “interaction” with Exchange (Exchange (ieie: no rules, no public folder access, limited : no rules, no public folder access, limited access to other mailbox folders)access to other mailbox folders)

EntourageEntourage20082008

MUST get either Office for Mac 2008 or Special MUST get either Office for Mac 2008 or Special Media Edition, NOT Office for Mac 2008 HOME or Media Edition, NOT Office for Mac 2008 HOME or Student editions (home and student don’t supportStudent editions (home and student don’t supportStudent editions (home and student don t support Student editions (home and student don t support Exchange!)Exchange!)Nearly 100% feature comparable to Outlook 2007, Nearly 100% feature comparable to Outlook 2007, with the exceptions: can’t schedule resources, with the exceptions: can’t schedule resources, server side rules need to be managed in OWA (can’t server side rules need to be managed in OWA (can’t be done in Entourage 2008 right now), need to use be done in Entourage 2008 right now), need to use OWA to Notes and Tasks permissions (also not in OWA to Notes and Tasks permissions (also not in Entourage 2008), can’t mark messages as Entourage 2008), can’t mark messages as private/confidential, no reply or read request private/confidential, no reply or read request confirmations, no ability to invite “optional” meeting confirmations, no ability to invite “optional” meeting attendeesattendees

Entourage 2008 (Entourage 2008 (con’tcon’t))Entourage for Exchange Web Services (Beta)Entourage for Exchange Web Services (Beta)

Update to Entourage 2008Update to Entourage 2008Uses “Web Services” instead of Uses “Web Services” instead of WebDAVWebDAV

Support for:Support for:Syncs Notes, Tasks, and CategoriesSyncs Notes, Tasks, and CategoriesSupports Attachments in Calendar AppointmentsSupports Attachments in Calendar Appointmentspp pppp ppFree / BusyFree / BusyOut of Office AssistantOut of Office AssistantDelegrationDelegrationAutoDiscoverAutoDiscover ServiceService

(requires Exchange 2007 SP1 Rollup 4 or higher (requires Exchange 2007 SP1 Rollup 4 or higher on the backend)on the backend)

Outlook Web Access 2007 (OWA)Outlook Web Access 2007 (OWA)

Runs in OWA “Light” mode in Safari or Runs in OWA “Light” mode in Safari or FireFoxFireFoxFull access to Exchange Web capabilitiesFull access to Exchange Web capabilities“Light mode” means no drag/drop, limited GUI, but most “Light mode” means no drag/drop, limited GUI, but most features work (features work (ieie: out of office, mobile device mgmt, : out of office, mobile device mgmt, junkmailjunkmail filtering, etc)filtering, etc)

Apple Apple iPhoneiPhone Support with ExchangeSupport with Exchange

Latest version of Latest version of iPhoneiPhone sofatesofate (v2.0) supports (v2.0) supports ActiveSync (which will “push” email to the ActiveSync (which will “push” email to the iPhoneiPhone))Syncs emails, calendar, contactsSyncs emails, calendar, contactsiPhoneiPhone 3G supports Cisco IPSec VPN, WPA 2, 802.1x3G supports Cisco IPSec VPN, WPA 2, 802.1xSupports Word, Excel, PPT, PDF attachmentsSupports Word, Excel, PPT, PDF attachmentsAllows lookAllows look--up of Exchange Global Address List (GAL)up of Exchange Global Address List (GAL)E2007 mobile phone “policies” and “remote wipe”E2007 mobile phone “policies” and “remote wipe”Does not have “Windows Mobile 6.x” features such as:Does not have “Windows Mobile 6.x” features such as:

Search Server or Information Rights Mgmt SupportSearch Server or Information Rights Mgmt Support

7

SharePoint from a MacSharePoint from a MacWorks off Apple Safari, Works off Apple Safari, FireFoxFireFox, etc just like on a Windows PC , etc just like on a Windows PC running Office 2003running Office 2003Post documents through the Web UIPost documents through the Web UICheck in/out docsCheck in/out docsKick off and participate in workflowsKick off and participate in workflowsEtcEtc

Note: Office 2007 for Windows has the added benefit of being able to Note: Office 2007 for Windows has the added benefit of being able to work “within” Office and never have to go to the Web UIwork “within” Office and never have to go to the Web UI

Office Communications Server 2007Office Communications Server 2007Full Instant Message / Full Instant Message / “Presence” support using the “Presence” support using the Microsoft Mac Messenger v7.x Microsoft Mac Messenger v7.x clientclientFreely downloadable from Freely downloadable from htt // i ft /htt // i ft /http://www.microsoft.com/machttp://www.microsoft.com/macDoes IM, Video, and Audio Does IM, Video, and Audio ConferenceConference

Other Access Methods for Macs to Run Windows SoftwareOther Access Methods for Macs to Run Windows Software

Using Windows Terminal Services Using Windows Terminal Services for Mac Access to Windows Appsfor Mac Access to Windows AppsDownload the Microsoft Remote Desktop Download the Microsoft Remote Desktop Connection (current v2.0) from Connection (current v2.0) from http://www.microsoft.com/Machttp://www.microsoft.com/MacSetup the icon to launch a specific application (Setup the icon to launch a specific application (ieie: : Outlook)Outlook)Outlook)Outlook)

RemoteProgramProgram

TerminalServer

Mac Computer

Windows app runs Windows app runs within the Mac desktopwithin the Mac desktop

Windows on a Mac (Windows on a Mac (BootCampBootCamp))Allows for dual boot, booting to either Mac OS or Allows for dual boot, booting to either Mac OS or to Windows upon power on of the computerto Windows upon power on of the computerPros:Pros:

Full capability of the system as a Mac Full capability of the system as a Mac ----oror–– PCPCFree, included as part of Mac OS X LeopardFree, included as part of Mac OS X Leopard

Con:Con:Con:Con:Must choose “either” Mac OS or Windows on bootMust choose “either” Mac OS or Windows on boot--up, up, so if you are in Windows, you’d have to reboot to so if you are in Windows, you’d have to reboot to switch to the Mac OS to run Mac applicationsswitch to the Mac OS to run Mac applications

To Install:To Install:On a system running the Mac OS X operating systemOn a system running the Mac OS X operating systemGo to Applications / UtilitiesGo to Applications / UtilitiesRun “Run “BootcampBootcamp Assistant”Assistant”

BootCampBootCamp ((con’tcon’t))Choose to partition off part of your hard drive to support Choose to partition off part of your hard drive to support Windows (leave space on the Mac partition to run things Windows (leave space on the Mac partition to run things like iTunes or other Mac applications, but allocate the like iTunes or other Mac applications, but allocate the lion’s share of space to Windows (for typical Windowslion’s share of space to Windows (for typical Windows--based users))based users))Shove in Windows CD/DVD when prompted and install Shove in Windows CD/DVD when prompted and install Windows like normalWindows like normal

After installation, when booting the system, hold down the After installation, when booting the system, hold down the ALT key on the keyboard until you hear the Apple “bong” ALT key on the keyboard until you hear the Apple “bong” and a menu will appear to choose Mac or Windows (note: and a menu will appear to choose Mac or Windows (note: default can be set in System Preference / Startup Disk to default can be set in System Preference / Startup Disk to choose your default boot operating system)choose your default boot operating system)

If you want to run HyperIf you want to run Hyper--V (hypervisor) virtualization on a V (hypervisor) virtualization on a MacProMacPro server, see my blog posting: server, see my blog posting: http://www.networkworld.com/community/node/30653http://www.networkworld.com/community/node/30653

8

Windows on a MacWindows on a Mac(Virtualization / Emulation)(Virtualization / Emulation)

Two most common Apps: Parallels and Two most common Apps: Parallels and VmwareVmwareFusionFusionParallels is by far the more mature / dependable Parallels is by far the more mature / dependable choice (VMware Fusion only came out in 2007)choice (VMware Fusion only came out in 2007)Provides “emulation” on older PowerPC Macs butProvides “emulation” on older PowerPC Macs butProvides emulation on older PowerPC Macs, but Provides emulation on older PowerPC Macs, but on new Intel Macs, runs at core operating system on new Intel Macs, runs at core operating system speeds and performancespeeds and performanceRun Windows XP, Vista, Windows 2000/2003/2008 Run Windows XP, Vista, Windows 2000/2003/2008 Server, etcServer, etcAbility to access Mac drive from within Windows, Ability to access Mac drive from within Windows, and Windows drive from the Mac Desktopand Windows drive from the Mac DesktopParallels for Mac Parallels for Mac ––oror–– VMware Fusion: $79.99VMware Fusion: $79.99

Windows on a Mac (Windows on a Mac (con’tcon’t))(Parallels / VMware Fusion)(Parallels / VMware Fusion)

Installation involves:Installation involves:Buying/Trying the software: download off WebsitesBuying/Trying the software: download off WebsitesRun the installerRun the installerLaunch the applicationLaunch the applicationShove in Windows CD when promptedShove in Windows CD when promptedShove in Windows CD when promptedShove in Windows CD when prompted

Running Parallels / Fusion:Running Parallels / Fusion:Launch the “virtual guest” you just createdLaunch the “virtual guest” you just createdWait for Windows to “boot” as an application within the Wait for Windows to “boot” as an application within the MacMacLogon to the Windows session and install/run Windows Logon to the Windows session and install/run Windows applications like normalapplications like normal

Add-in to Mac for Support of Kerberos, DFS, etc…Add-in to Mac for Support of Kerberos, DFS, etc…

Microsoft Distributed File System (DFS)Microsoft Distributed File System (DFS)

\\\\ContosoContoso\\PublicPublic\\\\ContosoContoso\\PublicPublic

DFS Namespace (DFSDFS Namespace (DFS--N)N)Namespace Namespace

ServerServer

Namespace Namespace RootRoot

DFS Folder TargetsDFS Folder Targets

\\\\SEASEA--SVRSVR--0101\\ToolsTools\\\\SEASEA--SVRSVR--0101\\ToolsTools

ToolsToolsDFS DFS

ReplicationReplication(DFS(DFS--R)R)

SoftwareSoftware

ToolsTools

Training Training GuidesGuides

FolderFolder

Folders with Folders with TargetsTargets

\\\\NYCNYC--SVRSVR--0101\\ToolsTools\\\\NYCNYC--SVRSVR--0101\\ToolsTools

ToolsTools

\\\\SEASEA--SVRSVR--0202\\TrainingTraining\\\\SEASEA--SVRSVR--0202\\TrainingTraining

Training Training GuidesGuides

AddAdd--in: in: ADmitMACADmitMAC by by ThursbyThursby SoftwareSoftwarehttp://www.thursby.com/http://www.thursby.com/Supports OS X 10.4 Tiger and 10.5 Leopard on Supports OS X 10.4 Tiger and 10.5 Leopard on PowerPC and Intel MacsPowerPC and Intel MacsFeatures of Features of ADmitMACADmitMAC

Provides full support for Kerberos authenticationProvides full support for Kerberos authenticationf ( C )f ( C )Bidirectional file and printer sharing (Macs<>PCs)Bidirectional file and printer sharing (Macs<>PCs)

Supports Distributed File System (DFS) as well as Supports Distributed File System (DFS) as well as home directory redirection to DFS shareshome directory redirection to DFS sharesSupports full NTFS file format (no “dotSupports full NTFS file format (no “dot--underscore”)underscore”)Full support for Windows ACLs on files / permissionsFull support for Windows ACLs on files / permissionsSupports long share name in Win2003/Win2008Supports long share name in Win2003/Win2008Allows for enforced password expiration and resetsAllows for enforced password expiration and resetsCaches user credentials so Mac user can logon offlineCaches user credentials so Mac user can logon offline

Add-in to Mac for Support of Active Directory Group PoliciesAdd-in to Mac for Support of Active Directory Group Policies

9

Group Policy ToolsNew GPOE & GPMC ToolsSearch and Filter on SettingsAdd comments to GPOs

Group Policy ServiceGP now runs in a shared serviceHardened Service, more reliable

Group Policy Templates

ADM Templates now in ADMX files (ADMX, ADML)

Multiple Local GPOsMultiple Local GPOs

Group Policy Settings

Over 800 new policy changes

Windows Vista/Windows Windows Vista/Windows Server 2008Server 2008

ADMADM ADMXADMX

LGPO’sLGPO’s

LGPOLGPO

AdminAdmin

UserUserAdmin/NonAdmin/Non--Admin GroupAdmin Group PolicyPolicy

Local Computer PolicyLocal Computer Policy

Network Location Awareness (NLA)

NLA service provides the latest network informationApplications can query or register with NLA for network change indications

Group Policy Logging

Administrative logApplications and Services logXML based event logsNew Tools - GPOLogView

Group Policy Central Store

Centralized repository for ADMXContains all ADMX templatesCreated in the Sysvol on DC in each domain

Group Policy Group Policy EnhancementsEnhancements

Over 800 new policy changes with Windows Vista (firewall, power, removable media, ptr mgmt)Extended GP for new Windows Vista features

NLANLA

UserUser Specified Group PSpecified Group Policyolicy

DCDC

FRS/DFSFRS/DFS--RR

SysVolSysVol

ADMXADMXADMLADML

++ PoliciesPolicies++++

GUIDGUIDADMADM

Policy Policy DefinationsDefinationsADMX, ADML FilesADMX, ADML Files

++

AddAdd--in: Direct Control (by in: Direct Control (by CentrifyCentrify))http://www.centrify.com/http://www.centrify.com/Specifically “Direct Control for Systems” (Specifically “Direct Control for Systems” (CentrifyCentrifyalso has Direct Control for also has Direct Control for WebAppsWebApps, DBs, ERP, , DBs, ERP, and Storage Systems)and Storage Systems)Features of Direct Control for SystemsFeatures of Direct Control for Systems

Effectively extends Group Policies to nonEffectively extends Group Policies to non--Windows Windows systems including Macs, Unix, and Linux systems)systems including Macs, Unix, and Linux systems)Provides cached credentials for offline logons by MacsProvides cached credentials for offline logons by MacsLock down System Preferences, enable screensaver Lock down System Preferences, enable screensaver lockinglockingUse same Logon/Password for Macs or WindowsUse same Logon/Password for Macs or WindowsForce Software UpdatesForce Software UpdatesDisable Disable AutoLogonAutoLogonCentrally manage Firewall / Internet Sharing abilitiesCentrally manage Firewall / Internet Sharing abilities

Installing / Implementing Installing / Implementing CentrifyCentrifyInstall the Install the CentrifyCentrify Microsoft “Console” on a global catalog or member serverMicrosoft “Console” on a global catalog or member serverIf a member server, install the adminpak.msi “Administrative Tools” on the If a member server, install the adminpak.msi “Administrative Tools” on the server so you have the AD Users and Computers MMC on the systemserver so you have the AD Users and Computers MMC on the systemLaunch AD Users and Computers (notice a “Launch AD Users and Computers (notice a “CentrifyCentrify” container in the UI” container in the UIRight click the container and “add” the Right click the container and “add” the CentrifyCentrify admin templates for the Mac admin templates for the Mac OSOS

Installing the Mac OS “Agent”Installing the Mac OS “Agent”““UnjoinUnjoin” the Mac from AD (if you joined it earlier ” the Mac from AD (if you joined it earlier (use the Applications / Utilities / Directory Utility, (use the Applications / Utilities / Directory Utility, unlock the lock, sit on AD, click the unlock the lock, sit on AD, click the –– button to button to unjoinunjoin))Run the Mac agent installer on the Mac (version Run the Mac agent installer on the Mac (version for PPC and i386 systems)for PPC and i386 systems)I t ll ill “j i ” th M b k i t ADI t ll ill “j i ” th M b k i t ADInstaller will “join” the Mac back into ADInstaller will “join” the Mac back into ADOnce installed, reboot the system and the agent Once installed, reboot the system and the agent is now activeis now active

In AD, create a Group Policy just like you would In AD, create a Group Policy just like you would for a Windows system, policy is applied when the for a Windows system, policy is applied when the Mac user logs in or reboots the Mac (I haven’t Mac user logs in or reboots the Mac (I haven’t found the equivalent of a “found the equivalent of a “gpupdategpupdate /force” (yet))/force” (yet))

Supporting Macs in Microsoft System Center Configuration Mgr 2007

Supporting Macs in Microsoft System Center Configuration Mgr 200720072007

System Center System Center ConfigConfig Mgr 2007Mgr 2007(Quest Management (Quest Management XtensionsXtensions))Patching / Application PushPatching / Application PushRemote ControlRemote ControlInventory / ReportingInventory / Reporting

10

QMX: System IdentificationQMX: System Identification QMX: Packaging and ReportingQMX: Packaging and Reporting

Backing up a Mac ComputerBacking up a Mac ComputerOption A: Plug in USB drive and run “Time Machine” (Mac OS X Option A: Plug in USB drive and run “Time Machine” (Mac OS X Leopard) utility to snapshot a backup of the Mac to the USB driveLeopard) utility to snapshot a backup of the Mac to the USB driveOption B: Install a backup agent on the system and backup to Option B: Install a backup agent on the system and backup to “tape” (“tape” (ieie: : NetBackupNetBackup Agent for Mac, or Agent for Mac, or CommVaultCommVault Agent for Agent for Mac, etc…)Mac, etc…)Option C: Setup a Mac Server and run Time Machine on the Macs Option C: Setup a Mac Server and run Time Machine on the Macs and backup the Macs to the Mac Server (then load a tape agent and backup the Macs to the Mac Server (then load a tape agent onto the Mac Server and backup the Mac Server to tape)onto the Mac Server and backup the Mac Server to tape)onto the Mac Server and backup the Mac Server to tape)onto the Mac Server and backup the Mac Server to tape)

Convergent ComputingConvergent ComputingServicesServices

Existing Network AssessmentExisting Network AssessmentActive Directory health checkActive Directory health checkServer consolidation and redesign optimizationServer consolidation and redesign optimization

Mac Integration and General Mac System SupportMac Integration and General Mac System SupportIntegration to AD / Integration to Existing Windows Mgmt SystemsIntegration to AD / Integration to Existing Windows Mgmt Systems

Implementation and Migration Planning AssistanceImplementation and Migration Planning AssistanceReview or assist in creating implementation plans based on best Review or assist in creating implementation plans based on best practicespracticesBudget hardware / software requirementsBudget hardware / software requirementsTime estimates on length of the migration processTime estimates on length of the migration process

HandsHands--on Migration and Implementation Assistanceon Migration and Implementation AssistanceCrossCross--training on best practices, tips, and trickstraining on best practices, tips, and tricks

Other Technology AssistanceOther Technology AssistanceExchange 2007 and SharePoint 2007 planning, design, migration, Exchange 2007 and SharePoint 2007 planning, design, migration, customization, and problem solving assistancecustomization, and problem solving assistanceOffice Communication Server 2007 instant messaging, Web Office Communication Server 2007 instant messaging, Web conferencing, VoIP planning, integration, implementationconferencing, VoIP planning, integration, implementationSQL 2005 performance optimization, DR, SQL 2005 performance optimization, DR, BusIntelligenceBusIntelligenceSecurity assessment, penetration testing, audit/reviewSecurity assessment, penetration testing, audit/review

Next SeminarNext Seminar“Configuration Mgr 2007: Tips, Tricks, and Best “Configuration Mgr 2007: Tips, Tricks, and Best

Practices at Systems Management”Practices at Systems Management”

MarMar 1111thth (Weds), (Weds), 9am9am--11:30am11:30am (Santa Clara Marriott(Santa Clara Marriott))Mar 12Mar 12thth (Thurs(Thurs), ), 9am9am--11:30am 11:30am (CSU East Bay Oakland) (CSU East Bay Oakland)

FreeFreeTo Register for this Seminar:To Register for this Seminar:

Email Email -- seminar@cco.comseminar@cco.com----oror----Call Call –– (510) 444(510) 444--5700 x179 (Seminar Registrations)5700 x179 (Seminar Registrations)----oror----Write Write –– ““ConfigMgrConfigMgr 2007 (SC or OAK)” 2007 (SC or OAK)” on today’s seminar on today’s seminar evaleval form to form to register for the upcoming eventregister for the upcoming event

Integrating Macs into a Microsoft Integrating Macs into a Microsoft Windows / Active Directory Windows / Active Directory EnvironmentEnvironment

Created and Presented by:Created and Presented by:Rand Morimoto, Ph.D., MCSERand Morimoto, Ph.D., MCSEAuthor, “Unleashed”Author, “Unleashed”--series / series / SamsSams PublishingPublishingPresident, Convergent ComputingPresident, Convergent Computinghttp://www.cco.comhttp://www.cco.comSeminar content: http://www.cco.com/online.htmSeminar content: http://www.cco.com/online.htm