Re: Max OSX 10 on Large Windows Domain

RollNpc wrote:
Can anyone please point me to a resource that would explain the
security risks to placing Mac's on a Windows domain. I am trying to
find how/if group policy is/isn't applied and other security problems
that can arise in a mixed environment.

Group Policies are not applied to Mac clients, as Lanwench noted.

The mac clients are quite configurable however, with various tools such as
the Apple Remote Desktop Tool, and if you have enough OS X clients to
justify it you can add a Mac server to your network, integrate it into AD,
and use this to centrally manage OSX client configuration and manage user
configuration from the Windows server as you do now.


--
--
Rob Moir, Microsoft MVP for Security
Blog Site - http://www.robertmoir.com
Virtual PC 2004 FAQ -
http://www.robertmoir.co.uk/win/VirtualPC2004FAQ.html


.

Relevant Pages

  • Re: Security Center
    ... Security Center.You can use a Group Policy ... a Windows domain. ... > but on 2 laptops whenever I do this it goes away but as soon as I restart it ...
    (microsoft.public.windowsxp.general)
  • Re: Max OSX 10 on Large Windows Domain
    ... security risks to placing Mac's on a Windows domain. ... Group policy is irrelevant, because only Win2k/XP will be able to make use ...
    (microsoft.public.security)
  • Re: Bit of advice on current AD structure.
    ... If you can do everything you need to do from a GPO and security standpoint there is no reason to move to something more complex. ... So you need to figure out what your security and group policy strategy is, then make your design. ... I am really disliking native delegation of security for user objects more and more as new apps come out and having rights to the users gives you rights to harm the apps, things like Exchange come to mind here where an admin who can directly manipulate user objects can cause nightmares for folks managing the Exchange Service. ...
    (microsoft.public.windows.server.active_directory)
  • Re: restrictions in effect
    ... I wonder if some security software installed on that client PC is causing your inability to change the home page. ... You could control the home page with a group policy, but it seems like that would be applying elsewhere besides this one PC. ... Then for the printing thing, I think I'd start by going to the IE Internet Options, Advanced tab, and click "Restore advanced settings." ...
    (microsoft.public.windows.server.sbs)
  • Re: lets vote for better security
    ... Liberals and security professionals who occassionally wear a black hat. ... Then MSFT started disabling things by default and a lot of the community ... Since when is an app responsible for the ... :>: default installation and be disable-able by Group Policy. ...
    (microsoft.public.security)