1. Mac Support @ Fermilab Name: Ben Segbawu Fermi National Accelerator Laboratory Computer Services Specialist Email: bens@fnal.gov May 12 2008

2. AGENDA Agenda His or Her Story The Numbers The Breakdown Support Counsel of Elders Licenses Screwdrivers & a Hammer Licenses The Main Event Updates The Canneries (Yellow People) The Blue Man Group Inventory and Software Distribution Welcome to the Borg The Challenges The Goal Questions and Answers

3. His or Her Story In late 1990s Mac Support was officially dropped at Fermilab Made a lot of Scientists and Computer Professionals happy DOE and rest of the world start to see an increase in Mac use Mac Support at Fermilab was officially re-introduced in June of 2007

4. The Breakdown As of February 2008 the Break down of Mac Operating systems are approximately 70 percent Leopard 25 percent Tiger and 4 percent Panther and 1 percent Other i.e. classic

5. The Numbers Officially there are 350 Macs ( laptops and Desktops and no Mac Air) as of time of writing this abstract Even though we have a 3 year cycle for computers at Fermilab we have found out that we have a few Mac systems that are quiet old and are running Panther

6. Support Our OS Support includes Leopard and Tiger Operating Systems. Any other previous operating systems have to get exceptions and be behind a Firewall Fermilab Security Requires Kerberos Our Clients include Computer Professionals, Physicists, and Directorate Personnel, Remote Operations Center and Visitors

7. Counsel Of Elders In order to make our Mac environment Enterprise Ready; the OSXWG ( OSX Working Group) was formed to Interpret DOE mandates and policies Create and review central management policies Review and comment on Baselines Advise on procedures and formulate new processes to make the Mac a more acceptable OS in the Enterprise Environment

8. Screwdrivers & a Hammer Whilst there are many tools/ products available in the Mac World to resolve issues we are currently in the process of evaluating a few tools that are Enterprise ready/ capable

9. Licenses License Administrator Technical Background Office Licenses Apple Licenses / Support Consolidation of Products

10. The Main Event Apple Update Server Anti Virus: Symantec and Sophos Inventory & Software Distribution: ARD and QMX- SMS Domain Membership: Centrify We will talk about the order in which these were and are being implemented and why.

11. Updates Software Update Server Hardware was available We had server Licenses

12. The Canaries (Yellow People) Symantec We “got” Mac Licenses when we purchased it for the Windows Environment We had the hardware and Software to run the Symantec Mac Admin Console Foot Print Support

13. The Blue Man Group Sophos One Admin Console for Windows and Macs Runs on a windows system Client Footprint Cost Support

14. The Blue Man Group Picture

15. Inventory & Package Distribution Quest Management Extensions Systems Management Server ( QMX SMS) provides a comprehensive solution for Inventory / Asset Management for the Mac platform, enabling Fermilab to provide relevant Software and Hardware Reports to Administrators quickly and cost-effectively. SMS provides the following key capabilities: Asset Management - Software and hardware assets can be tracked to ensure license compliance. Reports - SMS can produce software and hardware reports as well.

16. Inventory & Package Distribution Apple Remote Desktop (ARD). Native to Apple GUI and Command Line Capabilities Ease of Use Cost

17. Welcome to the Borg Did a Pilot With Vintela Authentication Services which is now part of Quest Active Directory Domain Membership Utilizing Centrify Pilot using version 3.07 Testing using Version 4.1 New xml format for adding GPOs

18. Welcome to the Borg Active Directory Domain Membership Utilizing Centrify No Extensions to AD Can Be managed from Either Direct Control or Active Directory Zones Utilization ARD can be implemented as a service

19. Fermi Apple Store Work with Apple to get an Fermi Apple store Requires KCA Cert to Use Recommended Systems Recommended Software Recommended Configuration Recommended License

20. The Challenges We shall not be assimilated Cost Freeware and Shareware Resources

21. The GOAL Provide Enterprise Level Architecture to Support Mac Integrate Macs into ITIL and Service Desk Environment that is currently being Formulated Provide Single Sign-on for Mac Users Meet DOE / Audit Requirements

22. Useful Sites http://www.fnal.gov www.symantec.com www.sophos.com www.centrify.com www.fnal.gov www.quest.com http://www.infoworld.com/article/08/04/21/17FE-macs-in-business-tease_1.html http://www.apple.com/support/security/ http://homepage.mac.com/macbuddy/SecurityGuide.html http://www.virusbarrier.com/

23. Questions bens@fnal.gov