• Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment

    Application Containment in the Post-PC Era

    I had a very interesting debate with someone the other day. The debate was around the Total Cost of Ownership of an app on a desktop computer. Let’s say that you have a $5 app. Now let’s say that in order to package that app up and test it for end user deployment, that the cost to your organization is about $400. That’s going to seem high if you just look at it as a number. But when you consider that it takes time to customize an app package so that end user data is preserved and end users aren’t prompted a dozen times, then it takes time to test…

  • Consulting,  Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment

    Come One, Come All: Speaking at ACES Conference 2016 in Austin

    The planning for ACES Conference 2016 seems to be in full gear. I’ve been slated to speak not on JAMF or Bushel stuff, but on my time in the Apple Consultants Network (ACN) community. One of the biggest challenges we had as we grew, was to responsibly pick vendors that matched with our customer requirements while also allowing us to scale efficiently. If you’re an ACN, this is a great conference for you. Check it out at https://acesconf.com!

  • Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment

    The Second Edition of the Enterprise Mac Administrator’s Guide Now Available for Pre-Order!

    The latest and greatest of the Enterprise Mac Admin’s Guide is now available for Pre-Order at http://www.amazon.com/Enterprise-Mac-Administrators-Guide-Second/dp/1484217055/ref=sr_1_1?s=books&ie=UTF8&qid=1445529968. This is an interesting update. If you happened to see the previous edition, I’d described more about Casper than most of the other third party products on the market. In this edition, there’s still an equal amount of information on Casper, but now there’s also more information on FileWave, and a whole chapter on the open source toolchain of products, including Munki and AutoPKG. The main reason I decided to update this title was actually the change from focusing on directory services (which still has plenty of page count) to focusing on profile management.…

  • Mac OS X,  Mac Security,  Mass Deployment

    The Third Edition of Enterprise Mac Security Now Available For Pre-Order!

    The third edition of the Enterprise Mac OS X Security book is now available for pre-order on Amazon at http://www.amazon.com/gp/product/148421711X! Another title with Apress, for this edition I welcome Dan O’Donnell as a coauthor and in addition to modernizing everything, added a lot more on FileVault, signing, iCloud and Apple services. I don’t know how long the editorial process for this book will take, but it’s listed on Amazon with a ship date of December 3rd!

  • Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment,  Xsan

    Configure Xsan Clients With OS X Server 5 For El Capitan And Yosemite

    Yosemite brought Xsan 4, which included a whole new way to add clients to an Xsan. Xsan Admin is gone. From now on, instead of scanning the network using Xsan Admin. we’ll be adding clients using a Configuration Profile. This is actually a much more similar process to adding Xsan clients to a StorNext environment than it is to adding clients to Metadata Controllers running Xsan 3 and below. But instead of making a fsnameservers file, we’re plugging that information into a profile, which will do that work on the client on our behalf. To make the Xsan configuration profile, we’re going to use Profile Manager. With OS X Server 5, this trend…

  • Mac OS X,  Mac OS X Server,  Mac Security,  Mass Deployment

    Encrypting OS X Server 5 Volumes In El Capitan

    Encrypting a volume in OS X couldn’t be easier. In this article, we will look at three ways to encrypt OS X El Capitan volumes in OS X Server 5. The reason there are three ways is that booted volumes and non-booted volumes have different methods for enabling encryption. Encrypting Attached Storage For non-boot volumes, just control-click or right-click on them and then click on Encrypt “VOLUMENAME” where the name of the volume is in quotes. When prompted, provide an encryption password for the volume, verify that password and if you so choose, provide a hint. Once the encryption process has begun, the entry previously clicked on says Encrypting “VOLUMENAME” where…

  • Mac OS X Server,  Mac Security,  Mass Deployment

    Run A Web Server On Apache Using OS X Server 5

    Web Services in Mac OS X, Mac OS X Server, Linux and most versions of Unix are provided by Apache, an Open Source project that much of the Internet owes its origins to. Apache owes its name to the fact that it’s “a patchy” service. These patches are often mods, or modules. Configuring web services is as easy in OS X Server, running on Yosemite and El Capitan, as it has ever been. To set up the default web portal, simply open the Server app, click on the Websites service and click on the ON button. After a time, the service will start. Once running, click on the View Server Website…

  • Mac OS X Server,  Mac Security,  Mass Deployment

    OS X Server 5 Logs

    OS X running the Server app has a lot of scripts used for enabling services, setting states, changing hostnames and the like. Once upon a time there was a script for OS X Server called server setup. It was a beautiful but too simplistic kind of script. Today, much of that logic has been moved out into more granular scripts, kept in /Applications/Server.app/Contents/ServerRoot/System/Library/ServerSetup, used by the server to perform all kinds of tasks. These scripts are, like a lot of other things in OS X Server. Some of these include the configuration of amavisd, docecot and alerts. These scripts can also be used for migrating services and data. Sometimes the scripts…

  • Mac OS X,  Mac OS X Server,  Mac Security

    Backup OS X Server Settings

    We covered using Time Machine Server previously. Here, we’re going to look at backing up the settings of an OS X Server. To do so, we’re going to install a little app called Bender from the great folks at Robot Cloud. You can download that from http://robotcloud.screenstepslive.com/s/2459/m/5322/l/94467-bender-automated-backup-of-os-x-server-settings. Once downloaded, run the package installer. At the Welcome to Bender screen, click Continue. Agree to the licensing agreement by clicking the Continue button. Click Agree again (assuming of course that you agree to the license). Choose who you wish to install the software for and click Continue. I’d go ahead and install Bender at the default location, so click Install. Once the…

  • Mac OS X,  Mac OS X Server,  Mac Security

    Setup NetBoot On OS X Server 5 for El Capitan and Yosemite

    The NetBoot service allows administrators of OS X computers to leverage images hosted on a server to boot computers to a central location and put a new image on them, upgrade them and perform automations based on upgrades and images. Since the very first versions of OS X, the service has been called NetBoot. In the Server app, Apple provides a number of options surrounding the NetInstall service, based on Automator-style actions, now calling the service NetInstall. The first step to configuring the NetInstall service is to decide what you want the service to do. There are three options available in System Image Utility (available under the Tools menu of…