Centralizing Mac Home. Live Webinar David McNeely Centrify Geordie Korper Group Logic

Transcription

1 Centralizing Mac Home Directories on Windows Servers Live Webinar David McNeely Centrify Geordie Korper Group Logic

2 Agenda EDA Overview Centrify DirectControl Group Logic ExtremeZ-IP Centralizing Home Directories Typical Use Cases Q&A 2

3 Integrating Macs in a Windows Environment 3

4 Enterprise Desktop Alliance Member Companies Uniform Client Configuration Enterprise Security Controls Data Protection Compliance Policies Sharepoints & Print Queues Application Support Help Desk & Knowledge Base 4

5 Enterprise Desktop Alliance Member Companies Uniform Client Configuration Enterprise Security Controls Data Protection Compliance Policies Sharepoints & Print Queues Application Support Help Desk & Knowledge Base Centrify DirectControl Atempo Backup AFP Server LANrev Client Mgmt 5

6 DirectControl 6

7 Integrating Mac Into The Windows Enterprise Centrify empowers the Windows-centric enterprise to manage and support OS X using existing expertise, tools and processes ADUC for user account, password and group management GPMC/GPOE for system and user configuration management MacBooks imacs 7 Active Directory

8 Unify Workstation Administration in AD Common account and authentication with Active Directory User account and group management Offline login to OS X laptops Admins granted local admin privileges GP config of Apple Remote Desktop Pre-validation for offline admin login Zones provide Separation of Duties and Access Control where needed All without changes to Active Directory 8

9 Enforce Security Policies Using Group Policy Automated security policy configuration for consistency Computer Group Policy is enforced at system join to AD User Group Policy is enforced at login Computer Policies control: Firewall settings and Services Security and Remote Management User Group Policies control: Finder and Preference settings Desktop, Dock and Login scripts Home Directory configuration 9

10 10 ExtremeZ-IP

11 Windows-based File/Print Services for OS X Windows based file and print server designed to: Seamless integrate Macs into Windows environments Mac users retain the Mac experience Windows Administrators can extend enterprise-class IT service delivery, including DFS, AD integration and file name policy enforcement, to the Mac Mac users retain the full Mac experience, improved performance and the ability to exploit all of the latest Apple innovations 11

12 Apple File Protocol Services for Windows AFP has several advantages over SMB for Mac User Compatible with all releases of Mac OS from Mac OS 9 to Mac OS X 10.6 Filenames expected by Mac users are valid including chars (/, \, ;,*,?, etc.) Stores Mac information in a single file instead of creating strange hidden files starting with "._" on the server Supports Windows shortcuts Properly supports setting and interpreting UNIX permissions Properly displays Windows ACLs in Mac OS X Finder Supports Mac OS X server side copy file operations ExtremeZ-IP is optimized to support multiple heavy Mac users Supporting files larger than 4GB Caching to handle more requests without accessing Disk Microsoft Clustering Services support for high availability 12

13 Advanced Mac-Friendly Services for Windows Filename Policies Per-volume control over naming and types of files allowed Network Spotlight Spotlight-based searching on servers via Windows Search Time Machine Compatibility Enabling backup to Windows Servers with per user quotas Print Server Supporting Mac user access to Windows Print Queues Service Discovery Simplifying discovery of file and print services without AppleTalk DFS Services Seamless and intuitive access to virtual DFS Namespaces 13

14 Integration in Windows Environments Centralizing Home Directories 14

15 Centralizing Home Directories User Requirements Home directory is expected to be available in the right place Accessible from multiple workstations if roaming Available offline when using a laptop p Impervious to failures, e.g. invisibly backed up IT Requirements Provide users simple access to home directories Consolidate and minimize file system management Simplifying locating home directories location independence Plan for the worst fault tolerance and auto-archive 15

16 Integration into Existing Windows Services Joining Active Directory enables seamless integration for: Home directory auto-mounts to Windows file shares Authenticated printing to Windows print queues Single sign-on to services such as Exchange, SQL, and IIS servers DirectControl provides extensive home directory support On Mac OS X servers via AFP On Windows servers via SMB or AFP with ExtremeZ-IP Server And on Windows DFS shares with ExtremeZ-IP Server Or Portable Home Directory with auto-sync to a network home 16

17 Home Directory Options for Mac Users Local Home Directory /Users dmcneely Network Mounted Home Directory test-win2008fs1 /AFP/dmcneely test-win2008fs1/m-z AFP/SMB mount afp://test-win2008fs1/a-l afp://test-win2008fs1/m-z dmcneely 17

18 Home Directory Options for Mac Users Portable Home Directory test-win2008fs1 /Users dmcneely Sync Contents t Over AFP/SMB mounts afp://test-win2008fs1/a-l afp://test-win2008fs1/m-z dmcneely File Vaulted Home Directory test-win2008fs1 /Users/dmcneely.dmg afp://test-win2008fs1/a-l dmcneely (after dmg mounts) Sync Contents Over AFP/SMB mounts afp://test-win2008fs1/m-z dmcneely 18

19 AFP Home Directories on Windows Servers Leveraging DirectControl s ability to control the users Home Directories and ExtremeZ-IP s AFP Server sharing Windows-hosted Network Home Directories: IT can provide Mac users with access to Windows Network Homes: Network mounted home directory Portable home directory synchronized to the network home test-dc2008 afp://test-dc2008/a-l afp://test-dc2008/m-z dmcneely 19

20 Distributed File Systems DFS simplifies administration and access to centralized storage DFS Namespace Provides users with a single view into the file shares Reconfigure file servers without retraining users Namespace Folder Targets DFS Replication Failover in the case of server failures Increase performance with geographic distribution Replication Group 20

21 ExtremeZ-IP: DFS Integration for Mac OS X Improve the manageability, reliability, and performance of file server infrastructure with DFS and ExtremeZ-IP ExtremeZ-IP provides full virtual DFS Namespace access to Mac clients is a seamless and intuitive manner Supports full DFS replication and site costing Provides support for Mac clients to DFS-based network or portable home directories when authenticating against AD at login Supports DFS referrals to both AFP (ExtremeZ-IP) servers or native SMB servers for mixed environments Only solution on the market that allows you to maintain AFP file sharing protocol in a DFS environment 21

22 Home Directories on DFS Shares DirectControl maps the home directory to the DFS Namespace Group Policy controls Network Mount or Portable Home config ExtremeZ-IP directs the mount from DFS Namespace to actual server share for both AFP or SMB centrify.demo Folder Targets NetHome /AFP/dmcneely centrify.demo/nethome/m-z A-L afp://test-win2008fs1 dmcneely (on the server) M-Z M-Z dmcneely 22

23 Centralized Home Directories on Windows Servers Typical Use Cases 23

24 Demo: Environment We will show a user login to both a desktop and laptop system to access his home directory hosted on a Windows Server test-macbook Leopard OS X 10.5 Domain Member: centrify.demo Centrify DirectControl Group Logic DFSclient test-dc2008 Windows Server 2008 Domain Controller: centrify.demo DNS Server DFS and File Server Group Logic ExtremeZ-IP Server test-macpro-g5 Leopard OS X 10.5 Domain Member: centrify.demo Centrify DirectControl Group Logic DFSclient test-win2008fw1 Windows Server 2008 Domain Member: centrify.demo DFS and File Server Group Logic ExtremeZ-IP Server 24

25 Demo: DFS Server Configuration 25

26 Demo: DFS Server Configuration 26

27 Demo: DFS Server Configuration 27

28 Demo: DFS Server Configuration 28

29 Demo: DFS Server Configuration 29

30 Demo: Group Policy Configuration 30

31 Demo: Group Policy Configuration 31

32 Demo: Group Policy Configuration 32

33 Demo: Group Policy Configuration 33

34 Demo: Desktop Login 34

35 Demo: Desktop Login 35

36 Demo: Network Home Directory 36

37 Demo: Laptop Login 37

38 Demo: Laptop Login 38

39 Demo: Laptop Login 39

40 Summary: Centralized Home Directories Leveraging DirectControl s ability to control the users Home Directories and ExtremeZ-IP s AFP Server sharing Windows-hosted Network Home Directories i on DFS Shares: IT can provide Mac users with access to Windows Network Homes: Network mounted home directory Portable home directory synchronized to the network home As well as to improve the manageability, reliability, and performance of file server infrastructure with DFS 40

41 EDA Solutions Enable Freedom of Choice for the Desktop For the Administrator Increases security by putting Macs under standard controls and policies Reduces costs through centralized administration & reduced hardware Reduces training overhead Minimizes and streamlines helpdesk services Better compliance with government, industry and licensing rules More security for systems and data For the Mac User Improves end-user experience by relieving user of self management Enhances Mac user productivity by providing access to standard Windowsbased desktop apps Expedites cross-platform file and print sharing Streamlines Mac access to Windows only apps 41

42 EDA Resource Center Comprehensive Resource Center: White Papers Interoperability Tech Notes Centralized Mac Home Directories with ExtremeZ-IP and DirectControl Chalktalks Webinars Case studies 42

43 Questions? Uniform Client Configuration Enterprise Security Controls Data Protection Compliance Policies Sharepoints & Print Queues Application Support Help Desk & Knowledge Base Centrify DirectControl Atempo Backup AFP Server LANrev Client Mgmt If you want to ask a question: Type the question into the Q&A panel on the right side of your screen. 43

44 Contact Us: Atempo Enterprise Data Protection Centrify - Identity & Access Management info@centrify.com Group Logic - File & Print Services info@grouplogic.com LANrev - Systems Lifecycle Management info@lanrev.com Parallels l Virtualization ti Web Help Desk Help Desk and Knowledge Base sales@webhelpdesk.com

45 The Enterprise Desktop Alliance Making it easy to deploy, integrate and manage Macs in a Windows environment