BFA TECHNOLOGIES. Macintosh in the Enterprise

Transcription

1 BFA TECHNOLOGIES Macintosh in the Enterprise

2 CHAPTER 1 Acquisition / Purchase Costs Sample (high-end) Macintosh Laptop: MacBook Pro 13 with Retina Display * Processor: 3.1GHz 5th generation dual-core i7 * Screen Size: 13.3 inches * Resolution: 2560 x 1600 Hard Drive: 128 GB Solid State Drive (SSD) RAM: 8GB Warranty (3 yr.): $249 Total Cost: $1,848 (List Price) Sample Windows Laptop: Dell Latitude 12 E7250 Processor: 2.6GHz 4th generation i7 Screen Size: 12.5 inches Resolution: 1366 x 768 Hard Drive: 128 GB Solid State Drive (SSD) RAM: 8GB Warranty (3 yr.): Included * Total Cost: $1649 (List Price) * Denotes superior spec (in red) ADDITIONAL COSTS (MAC VS. WINDOWS) $50 more affordable: Macintosh Hardware, 1 yr. std. warranty $199 less affordable: Macintosh Hardware, 3 yr. warranty

3 Sample (lower-end) Macintosh Laptop: MacBook Pro 13 with Retina Display * Processor: 2.7GHz Dual-core Intel Core i5 * Screen Size: 13.3 inches * Resolution: 2560 x 1600 Hard Drive: 128 GB Solid State Drive (SSD) RAM: 8GB Warranty (3 yr.): $249 Total Cost: $1,548 (List price) Sample Windows Laptop: Dell Latitude 12 E7250 Processor: 2.6GHz 4th generation i7 Screen Size: 12.5 inches Resolution: 1366 x 768 Hard Drive: 128 GB Solid State Drive (SSD) RAM: 8GB Warranty (3 yr.): Included * Total Cost: $1,649 (List Price) * Denotes superior spec (in red) ADDITIONAL COSTS (MAC VS. WINDOWS) $350 more affordable: Macintosh Hardware, 1 yr. std. warranty $101 more affordable: Macintosh Hardware, 3 yr. warranty BACKGROUND INFORMATION: General: It is not possible to exactly match the existing Dell laptop with a corresponding Apple MacBook Pro laptop on a spec by spec basis Therefore BFA has included (2) different MacBook Pro laptops for comparison It is felt that the higher-end MacBook Pro greatly exceeds the specs of the existing Dell laptop in many key areas at an incremental cost of only $199 (includes 3 yr. warranty) It is felt that the lower-end MacBook Pro exceeds the specs of the existing Dell laptop in all of the same key areas as the higher-end offering - with the exception of the processor - at a savings of $101 (includes 3 yr. warranty) Pricing Source: The Apple MacBook Pro quotation information was provided by the Apple Store Online The Dell quotation information was obtained at Dell s website NOTE: BFA Technologies, Inc. does not sell Apple products 2

4 D OCUMENT 1.1: Apple 13 MacBook Pro i7 Processor (high-end) D OCUMENT 1.2: Apple 13 MacBook Pro i5 Processor (lower-end) D OCUMENT 1.3: Dell 12.5 E7250 i7 Processor

5 CHAPTER 2 Active Directory Enterprise desired standard: Although there are many excellent solutions for integrating Macintosh in an AD environment, the goal here is to allow for the most feature filled method of integrating Macintosh into Active Directory Standard on Macintosh: Apple s (built-in) support for Active Directory within OS X enables Macintosh clients to integrate smoothly into existing Active Directory environments, and provides the option of deploying a single directory services infrastructure that can support both Mac and Windows clients Source: Best Practices for Integrating OS X with Active Directory (Apple Dec., 2014) BFA Recommended Application(s) for Enterprise: Centrify: Identity, Policy and Device Management for Macs ADDITIONAL COSTS (VS. WINDOWS) Centrify Mac Edition (Mac) $53: Per device annual fee $550: Annual 1 yr. 24/7 support for 5 Admins

6 BACKGROUND INFORMATION: General: Limited built-in AD support at no additional cost: Apple Technical White Paper : Best Practices for Integrating OS X with Active Directory Out of the box, OS X seamlessly integrates with a variety of directory service technologies, including Active Directory (AD) at no additional cost When integrated into Active Directory, OS X supports password policy, user and group account lookups, single sign-on using Kerberos, and more However, this built-in AD support from Apple admittedly does not offer full, maximum support for all Active Directory Services Fully-featured Active Directory Support: Maximum support of Active Directory services for Apple Macintosh (OS X) can be achieved via the purchase of 3rd party software BFA believes that Centrify is the industry leader for providing full Active Directory Services for Macintosh and Mac OS X. And therefore Centrify is recommend for this solution CENTRIFY: Centrify Active Directory-Based Identity Management Centrify offers consistent, enterprise-grade management for Mac in an Active Directory environment: Robust support for Active Directory-based management and user login for Macs, even with multiple domains or forests with one- or two-way trusts Seamless integration of Macs and mobile devices into Active Directory-based management without any changes to the AD schema Auto-zone or Zone-based user identities simplify enterprise integration: Automatic management of Mac user identities for normal workstation use in typical Windows-centric environments Assign a Mac to an individual user, such as an executive, for exclusive access, while also enabling access by authorized support staff Enforce stringent access controls to ensure that only authorized users can log in Configure home directories to match the user access model: Laptop users with a local home directory and offline access; 5

7 network users with centralized file servers; and classroomtype configurations where users have network-based home Provide full access to network directories via AFP, SMB or DFS or locally Users get the same single sign-on experience accessing enterprise services and applications such as file servers, printers, intranet websites, Kerberized apps, and Microsoft applications, including Exchange, SQL and IIS servers Mac users enjoy the same level of support and seamless access to the enterprise as Windows users Licensing / Pricing Information: Centrify s pricing comes in two forms: Per-device pricing (annually): $53 24/7 Admin support (annually): $550 6

8 CHAPTER 3 Microsoft Exchange / Office Enterprise desired standard app(s): There are two approaches to address Macintosh connectivity to Microsoft Exchange: Built-in Macintosh applications (Mail, Contacts, Calendar) or Microsoft Outlook (add. cost). For the purposes of this document, Outlook is assumed to be the desired choice For Exchange connectivity: Microsoft Outlook For word processing, spreadsheets and presentations: Microsoft Word, Excel and Powerpoint Standard on Macintosh: For Exchange connectivity: Apple Mail, Contacts and Calendar apps: NOTE: These work in tandem with each other For word processing, spreadsheets and presentations: Apple iwork (Pages, Numbers and Keynote) NOTE: These are compatible with Microsoft Office BFA Recommended Application(s) for Enterprise: For Exchange connectivity: Microsoft Outlook for Mac For word processing, spreadsheets and presentations: Microsoft Word, Excel and Powerpoint for Mac NOTE: All of the above come as a part of the new Microsoft Office for Mac (In beta now with production versions in 2nd half 2015) ADDITIONAL COSTS (VS. WINDOWS) $0.00 * This assumes that costs are the same regardless of platform per Enterprise s agreement w/ Microsoft

9 GENERAL INFORMATION: Exchange: Apple s suite of standard applications - Mail, Contacts, Calendar - work together to allow for seamless connectivity to Microsoft Exchange. However, there are any number of 3rd party solutions for Exchange connectivity Enterprise s corporate standard, Microsoft Outlook, is also available on the Macintosh in the form or Outlook for Mac Licensing / Pricing Information: Microsoft Office 2016 for Mac is not included on new Apple Macintosh systems. Therefore, as Microsoft Office must be additionally purchased for both Macintosh and Dell systems, BFA has made the assumption that the Enterprise has an agreement in place with Microsoft that provides for the respective Office software for either platform at the same cost. The latest version of Outlook for Mac (2015) more than ever resembles it s companion Windows-based Outlook making it easier than ever for Windows users to feel more comfortable on a Macintosh. Outlook for Mac Microsoft Office for Mac 2016: The new, about-to-be-released Microsoft Office for Mac 2016 (available in beta today) includes the following applications: Word, Excel, Powerpoint, OneNote, and Outlook. Microsoft released a Preview of Office for Mac 2016 on March 5, The new suite of Office apps is due to launch in the second half of Office for Mac Preview: 8

10 CHAPTER 4 Macintosh Management Enterprise desired standard: There are two approaches when considering Macintosh management; Active Directory (AD) centric and non-ad centric. The information here assumes that full Active Directory services for Macintosh - equivalent to those already in place for Windows-based client computers - is the desired goal. NOTE: This would have already been made possible via the purchase of and costs for Centrify per Chapter 2 Standard on Macintosh: Apple offers a management application called Apple Remote Desktop for an additional, one-time cost of $ This comes with unlimited licensing. Additionally, there are a number of free applications for Macintosh management. (Ex: Munki) BFA Recommended Application(s) for management: Centrify (per Chapter 2) will provide full Active Directory (AD) services management for the Macintosh computers. ** For non-ad centric, BFA would recommend The Casper Suite from JAMF Software. ADDITIONAL COSTS (VS. WINDOWS) $0.00 * This assumes the purchase of Centrify per Chapter 2

11 CHAPTER 5 Virus Protection and Security Enterprise desired standard app(s): Any given Enterprise will already have a standard solution for antivirus for their Windows machines Many / most of these software anti-virus solutions also support the Macintosh platform For the sake of this document, it is assumed that the existing antivirus solution does indeed support Macintosh Standard on Macintosh: There is no built-in, anti-virus protection application per se that comes standard with a Macintosh However, via OS X, Apple has implemented many OS-level features to help prevent the spread of viruses For example, unlike Windows, Mac OS X does not allow userlevel access to root/admin accounts by default. App sandboxing isolates apps from the critical system components of the Mac, its data and its apps. Gatekeeper makes it safer to download apps by protecting the user from inadvertently installing malicious software on their Mac. BFA Recommended Application for anti-virus: Existing Enterprise anti-virus solution ADDITIONAL COSTS (VS. WINDOWS) $0.00

12 CHAPTER 6 Client Data Management: Backup Enterprise desired standard (backup): Any given Enterprise will already have a standard solution for backup for their Windows machines Many / most of these backup software solutions also support the Macintosh platform For the sake of this document, it is assumed that the existing backup solution does indeed support Macintosh Standard on Macintosh: For backup, every Macintosh comes standard with Time Machine backup software BFA Recommended Backup Application for Enterprise: Existing Enterprise backup solution ADDITIONAL COSTS (VS. WINDOWS) Not Applicable

13 C HAPTER 7 Windows programs running natively on Macintosh Enterprise desired standard: For users needing native Windows OS on a Mac, it is desired the the user not have to leave the Mac OS X environment. Standard on Macintosh: Apple provides a free application called Boot Camp that allows a Windows OS to run natively on Macintosh However, in order to run Windows under Boot Camp, the user must completely shut down the Mac OS X environment and reboot into the Windows OS BFA Recommended Application(s) for Enterprise: Parallels VMware Fusion for Mac: Included as an alternative to Parallels. For Enterprises who already have a heavy investment in VMware product, this might serve as a practical alternative. A DDITIONAL C OSTS ( VS. W INDOWS ) $79.00: Cost of Parallels or VMware for Mac * This assumes that Enterprise has Microsoft site licenses for the Windows OS within it s environment. Otherwise, there would be additional costs for the OEM version of the desired Windows OS.

14 GENERAL INFORMATION Using both operating systems: It is possible to work with Windows files in OS X using apps that have versions available for both operating systems Alternatively, many Mac-only apps can import files formatted for Windows file formats Running Windows on a Macintosh: Natively: Apple Bootcamp Leveraging Apple s free Bootcamp application, it is possible to install a Windows OS on a Macintosh computer in its own partition After installation, upon startup, a user can then choose to natively boot into either the Windows OS or into the Mac OS X environments on their Macintosh While using Boot Camp, Windows apps have full, native access to multiple processors and multiple cores, accelerated 3D graphics, and high-speed ports and networking technology such as USB, FireWire, Thunderbolt, Wi- Fi, AirPort, and Gigabit Ethernet. Via Virtualization If a user doesn t need the increased performance of Boot Camp, virtualization offers instant access to Windows OS without having to leave the Mac OS X environment. VMware Fusion and Parallels Desktop are the two most popular third-party Windows virtualization solutions. VMware Fusion Parallels The Windows OS is loaded inside of either VMware Fusion or Parallels as a virtual machine. Multiple virtual machines can be configured and running at the same time...along with the native Macintosh operating system. The Windows environment can be run in any one of three different modes: 1.) Full-screen; 2.) Windowed, or; 3.) In coherence. The coherence mode essentially hides all traces of the Windows environment and allows for Macintosh and Windows applications to run side by side as if they were both running on the same operating system. With great advances in virtualization software - along with huge performance increases in today s Mac s - virtualization can now be run very effectively with great performance. 13

15 Licensing / Pricing Information: The list price for either Parallels or VMware Fusion virtualization software is only $79. In addition, a full version of the desired Windows OS must be available as well to load into the virtual machine BFA has made the assumption that the Enterprise has Microsoft site licenses for the Windows OS within it s environment. Otherwise, there would be additional costs for the OEM version of the desired Windows OS. 14

16 CHAPTER 8.Net based applications requiring Internet Explorer only Enterprise desired standard: Some applications used in the Enterprise were written using Microsoft.Net The ability to run Internet Explorer for Windows on a Macintosh is therefore required for the users of those.net applications Although this could be accomplished by virtualizing the Windows OS, this is a more affordable alternative Standard on Macintosh: Applications based on Microsoft.Net technology, by definition, require the use of Microsoft Internet Explorer for Windows Microsoft Internet Explorer for Windows does not run natively on a standard Macintosh BFA Recommended Application for.net (only) for Enterprise: WINE ADDITIONAL COSTS (VS. WINDOWS) $0.00 (WINE is donation-ware) NOTE: If you take the path of virtualization of the full Windows OS (via Parallels or VMware Fusion for Mac per Chapter 7), Internet Explorer will be included from the Windows OS.

17 GENERAL INFORMATION: WINE: Wine allows OS X users to run Windows applications without the need for a Windows operating system Wine (originally an acronym for "Wine Is Not an Emulator") is a compatibility layer capable of running Windows applications on several POSIX-compliant operating systems, such as Linux, OS X, and BSD. able to run.net applications natively in Windows and would therefore not need to install Wine. Licensing / Pricing Information: Wine is offered as donation-ware, meaning that the writers of Wine leave it up to the individual or company to donate what they feel is a fair fee in order to use their product. Instead of simulating internal Windows logic like a virtual machine or emulator, Wine translates Windows API calls into POSIX calls on-the-fly. Internet Explorer for Windows is arguably the most common Windows application used on a Macintosh via Wine. Bottom line, through its support of Internet Explorer for Windows, Wine offers the ability for a Macintosh user to potentially run.net based applications...without the additional cost and overhead of having to run the Windows OS in a virtualized environment. ALTERNATIVE SOLUTION: Obviously, for those users who must have the full Windows OS running on their Macintosh (See Chapter 7), they would be 16

18 CHAPTER 9 BFA Helpdesk and Training Enterprise desired standard: It is assumed that Apple and Apple-related support from the Enterprise s internal help desk is required. Based on the above, it was assumed that BFA will: Train Enterprise s existing help desk staff to serve as tier 1 support for Macintosh Serve as tier 2 support for the Enterprise Standard on Macintosh: Apple, via its Applecare warranty, supplies the phone support for the following periods of time: 90 days (standard warranty) 3 years (with additional purchase of AppleCare) NOTE Applecare will only address Apple OS and Apple applicationbased issues and questions BFA s Recommendation: Provide on-site training of Enterprise s help desk staff Offer phone, remote screen sharing and - if necessary - depot support as a part of tier 2 support ADDITIONAL COSTS (VS. WINDOWS) $3,000: One-time, on-site training of 4-6 help desk people (NOTE: Based on 16 hours of training) $150/hr. for on-going tier 2, remote support (until metrics can be established to potentially bill monthly.

19 CHAPTER 10 Per-Device Cost Matrix & Other Fees: PER-DEVICE #1: DELL VS. HIGHER-END 13 MACBOOK PRO Hardware DELL - YR1 Apple - YR1 Apple - YR2 Computer (w/o tax) $1, $1, $0.00 Hardware Warranty included $ $0.00 Accidental Coverage included n/a n/a Active Directory Centrify - User cost (per yr.) $0.00 $53.00 $53.00 Microsoft Office / Exchange Macintosh Management Virus Protection Client Backup Windows on Mac No cost difference using Windows or Mac platform Active Directory would be managed by Centrify No cost difference using Windows or Mac platform No cost difference using Windows or Mac platform Parallels or VMware $0.00 $79.00 $0.00 Windows 7 $0.00 $0.00 $0.00.NET Apps Recommend virtualization software to run Windows Total Yearly Costs: $1, $1, $53.00 Mac Incremental Costs: $ $53.00 PER-DEVICE #2: DELL VS. LOWER-END 13 MACBOOK PRO Hardware DELL - YR1 Apple - YR1 Apple - YR2 Computer (w/o tax) $1, $1, $0.00 Hardware Warranty included $ $0.00 Accidental Coverage included n/a n/a Active Directory Centrify - User cost (per yr.) $0.00 $53.00 $53.00 Microsoft Office / Exchange Macintosh Management Virus Protection Client Backup Windows on Mac No cost difference using Windows or Mac platform Active Directory would be managed by Centrify No cost difference using Windows or Mac platform No cost difference using Windows or Mac platform Parallels or VMware $0.00 $79.00 $0.00 Windows 8 $0.00 $0.00 $0.00.NET Apps Recommend virtualization software to run Windows Total Yearly Costs: $1, $1, $53.00 Mac Incremental Costs: $31.00 $53.00

20 YEARLY SUPPORT FEES (3rd Party): ON-GOING BFA TIER TWO SUPPORT FEES: FIXED COSTS Item Cost Frequency Centrify Admin 24/7 Support $ Yearly ON-GOING SUPPORT COSTS Item Cost Frequency BFA Tier 2 (Remote) Support $150/hr. One-Time NOTE: The above amount represents an annual 24/7 support fee from Centrify for 5 administrators. ONE-TIME FEES (BFA): ONE-TIME COSTS NOTE: As there are several unknowns - i.e. the total number of Macintosh devices and the frequency / number of tier 2 calls - BFA does not feel that it is possible at this time to price on-going tier 2 support on a fixed, per-month basis. Therefore the rate listed is BFA s standard per-hour rate. This can be revisited at any time (recommended 60 days) in order to reprice this support based on an on-going, monthly basis. Item Cost Frequency Macintosh Support Tier 1 Training $3,000 (Est.) One-Time NOTE: BFA estimates that we can train Enterprise s tier 1 help desk support team in 16 hours. The amount listed above represents two full days at $1,500/day. If the duration of the training exceeds two days, then additional fees will apply. 19

21 CHAPTER 11 Helpful Links Apple Laptops: Apple MacBook Pro Active Directory: Best Practices for Integrating OS X with Active Directory Centrify Mac Management Windows on a Mac: Apple Bootcamp Parallels VMware Fusion Microsoft.Net based Support: Wine Microsoft Exchange: Outlook for Mac 2016 Microsoft Office: Office for Mac 2016 Mac Management: Centrify Mac Management (best via Active Directory) JAMF Casper Suite (best overall) Virus Protection: Trend Micro Antivirus for Mac Client Data Management: Backup Time Machine Basics