Managing Your Network with Macintosh Manager · 2018-08-30 · Managing Your Network with Macintosh...

Apple Computer, Inc. December 1999

Managing Your Networkwith Macintosh Manager

Benefits and Transition Strategies

Managing Your Network with Macintosh Manager 2

Contents

Section I:

An Introduction to Macintosh Manager...........................3

Product Overview..............................................................4

Workstation Management.................................................5

User Management..............................................................6

Workgroup Management..................................................7

Server Requirements....................................................... 10

Workstation Requirements............................................. 11

Summary.......................................................................... 11

Section II:

Migrating from At Ease to Macintosh Manager............ 12

Transition Strategies....................................................... 13

Converting At Ease Servers to Macintosh Manager

Scenario 1: Converting an At Ease server toMacintosh Manager running on Mac OS X Server........ 15

Scenario 2: Converting an At Ease server toMacintosh Manager running on AppleShare IP............. 18

Administering Macintosh Manager andConfiguring Client Workstations .................................. 21

Custom Share Points and Document Storage Options ... 25

Resources......................................................................... 26


Section I:

An Introduction toMacintosh Manager

Apple Computer, Inc. doesn’t just make the best personal computers in the world, butalso delivers the easiest computers to manage on a network. Macintosh Manager isApple's new workstation management technology, providing network administrators witha centralized method of securing Mac OS workstations, controlling user software access,and providing a consistent, personalized experience for the users. Macintosh Manager isthe foundation for all future Apple-developed workstation management tools and is thesuccessor to At Ease for Workgroups. Initially introduced with Mac OS X Server inJanuary 1999, Macintosh Manager has been further extended with the addition of aversion for AppleShare IP.

Macintosh Manager offers a number of unique advantages to Apple customers. Theclient software is part of Mac OS 9, allowing you plug in a brand-new iMac (or otherApple computer) and automatically have it participate in the managed network.Macintosh Manager also consolidates support for several generations of Macintosh,providing support for Mac OS 7 and 8 as well as Mac OS 9. Macintosh Manager is alsofully integrated with Apple's NetBoot technology, which allows you to easily managesystem as well as user configurations.

Macintosh Manager is designed for every network administrator supporting Mac clients.User preferences and documents are stored on a central server, allowing users to accesstheir personal desktops anywhere on the network. As the administrator, you can monitorand control disk storage and printer usage. You can even provide a simplified userinterface for inexperienced users or areas needing heightened security, via the RestrictedFinder and Panels interfaces.

Macintosh Manager also offers a number of advantages over At Ease for Workgroupsand similar products. It is designed for advanced operating systems and protocols, suchas Mac OS X Server and TCP/IP, though it also supports existing networks built aroundAppleShare IP and AppleTalk. Reliability and scalability have been greatly enhanced,allowing it to manage up to 8,000 user accounts and 400 different workgroups, andsupport over a thousand connected users. The user interface has also been updated, andoffers an even richer array of features for managing user preferences, printer and diskquotas, and access to applications and machines.

This document is intended to help you understand how Macintosh Manager can help youto further improve security, reduce support costs, and prepare for the future. Later


sections focus on assisting you with a migration to Macintosh Manager from an existingAt Ease for Workgroups network. If you are building a fresh Macintosh Managernetwork, you should refer to the complete Macintosh Manager documentation. If youare considering a phased transition, you should consult the Technical Information Library(TIL) for the very latest information on this task. You will find the TIL athttp://til.info.apple.com. Search for Macintosh Manager and At Ease. You can alsocheck with you Apple representative, reseller or sales agent for services that may beavailable to you locally.

Product Overview

Macintosh Manager is a workstation management application for Mac OS–basedpersonal computers. Macintosh Manager was introduced with Mac OS X Server inJanuary 1999 and a version for AppleShare IP was introduced in December 1999.Together with Mac OS 9, Macintosh Manager is the foundation for future Apple-developed workstation management tools and is the successor to At Ease forWorkgroups.

Macintosh Manager contains many of the same product goals and features of At Easeincluding:

• Managed, secure access to Mac OS–based workstations• Easy access to applications and files via a Restricted Finder or Panels environment• Ability to set disk storage and printer quotas

Macintosh Manager extends these product goals with advanced features including:

• More connected users• Advanced preference saving features• Advanced printer and disk quota features• Ability to limit access to specific workstations• Updated management software interface• Advanced application access• Ability to connect and manage via TCP/IP or AppleTalk protocols• Dramatically faster login/logout for Mac OS 9 clients

Macintosh Manager is also a more scalable solution than At Ease for Workgroups. AMacintosh Manager server can support up to 400 workgroups and manage up to 8,000user names; this is double the capacity of an At Ease for Workgroups server.

The following sections provide more information on the new features of MacintoshManager.


Workstation Management

Macintosh Manager introduces a new model of adding and managing workstations to amanaged group. At Ease requires the administration program to add the workstationsprior to usage. As new workstations are purchased, the At Ease administrator has torepeat this process over and over. Macintosh Manager removes this requirement.Workstations are added to the Macintosh Manager environment by default. In addition tomaking it easier to add workstations, Macintosh Manager provides new capabilities forcontrolling workstation usage.

Macintosh Manager Computer Lists

Administrators can create multiple lists that control which users can use particularworkstations and when those workstations can be automatically started up and/or shutdown (available on Power Macintosh systems that support Energy Saver).

These new workstation management tools make it easier to secure computer usage inadministrative areas and open labs. For example, let's say a new group of iMac DVsystems has been purchased for the primary use of creating and editing DV movies. Dueto space constraints, the new iMac DV systems have been placed in an open lab alongsideother general-use systems. To reserve the new iMac DV systems exclusively forauthorized video production work, the administrator can use Macintosh Manager tocreate a special workgroup list for these systems, assign specific users via workgroupsand restrict who can use these workstations and what applications can run on them.

Another new security option called Idle Log-out lets administrators further secureworkstations by setting a timer on a list of workstations that either automatically logs outthe current user or locks the screen. This is an important feature for teacher oradministrative systems that may have sensitive information on the local hard drives. If theuser forgets to log out, the system will automatically keep unwanted users from accessing


information from and on these systems. Teacher and administrative systems could haveshorter idle times than student systems to provide better security while teachers oradministrators are way from their desks.

User Management

At Ease for Workgroups provides three classes of users:• User: student, teacher, and administrator• Workgroup Administrator: staff member who manages workgroup• Administrator: global system manager

Macintosh Manager provides the same three classes of users:• User• Workgroup Administrator• Global Administrator (the same as At Ease Administrator)


Similar to the At Ease Administrator user class, the new Macintosh Manager GlobalAdministrator class gives the highest-level administrator the ability to control what otheradministrators are able to change. For example, the workgroup “English Class” can beassigned a Workgroup Administrator who can only change settings for that specificworkgroup. This administrator cannot manage any other workgroups. This class of user isideal for teachers and lab assistants who need to manage only their respectiveworkgroups.

Both systems provide the ability to enable or disable log-in capabilities as well as allowusers to change their passwords and require them to change passwords at the next log-in.

Macintosh Manager provides the additional capability of disabling log-ins on a specificdate. For example, if you wanted to disable log-ins for the graduating class of 2000 on theday of graduation, you would simply select those users and select the Disable option andenter the date of graduation.

Macintosh Manager Disable Log-in

Macintosh Manager introduces a new user log-in feature called System Access. SystemAccess provides full, unrestricted access to a workstation. This type of access is ideal forteachers and administrators who need unrestricted access to the Mac OS but want theadded security of system log-in.

Workgroup Management

Like At Ease, Macintosh Manager provide three classes of workgroup access:

• Finder: The users can use all Mac OS resources, similar to stand-alonecapabilities.

• Restricted Finder: The Finder is the interface but menu items such as theChooser and control panels can be turned off, screen shots can be disabled,audio CD use can be disabled, and access to network storage can be managed.

• Panels: The Panels environment provides a simplified interface that makes iteasier for younger students to access applications and documents. They seeonly the resources that they are allowed to access and cannot see any otherpart of the computer. This option is also popular in open labs because it makesit easier to launch applications and access shared storage services.

Macintosh Manager provides increased application access options. In addition toallowing the administrator to select which applications a workgroup can launch,Macintosh Manager also lets the administrator define where the applications are launched


from and restrict the location of applications. For example, if an application such as ascanner application requires supporting hardware, the administrator can provide access tothis application to multiple workgroups, but it will launch only if a user is working on aworkstation with a scanner attached to it. This selection can reduce the support timerequired for answering user inquiries about why particular applications work on somemachines and not on others.

This feature also provides support for applications that either do not provide networklicenses or cannot be launched from a server volume and need to be launched locallyfrom particular workstations.

Macintosh Manager Application Access

Macintosh Manager adds new menu and storage privilege options as well. In addition todefining what Apple menu and Special menu options a user can access, MacintoshManager also provides audio CD and screen shot controls. These are important featuresfor managing open labs where audio CDs may cause noise distractions. Screen shotcontrol helps enforce copyright regulations when students are accessing researchmaterials.


Macintosh Manager Options

The storage volume features of Macintosh Manager have been simplified and the optionsare now easier and more flexible to set up. Printer control options have also beenexpanded. In addition to an easier interface, authorized printers can be selected perworkgroup, users can be limited to printing x pages every y days, user information can beprinted on the top or bottom of every page, and the Administrator password can berequired for certain printers. This feature is especially useful for expensive color printersyou may want to provide access to a printer for a certain group but control when they canprint and what they print. With this option selected, students are prompted with anAdministrator password before their job is actually printed. The teacher can then reviewwhat needs to be printed and then enter the password to enable printing.

Macintosh Manager Printer Control Options

Macintosh Manager provides new reporting functions as well. The Connected Machinesreport lists the workstations that are currently logged into the Macintosh Manager systemas well as the users who are accessing the workstations. A new report called Workgroupsby User has been added to make it easier to identify the groups that a user belongs to. The


disk space, user activity logs, and printer quota reports provided by At Ease are alsoavailable in Macintosh Manager. Macintosh Manager includes a new Usage Historygraphic that provides server utilization information. The line in the graph below indicatesserver usage over the last 84 seconds and is continuously updated while the server isrunning. This report is particularly important for server capacity planning. For example,if the sustained usage increases to 50% or higher and is maintained at that level, it is timeto deploy another server.

Server Requirements

Requirements for running Macintosh Manager on Mac OS X Server.

• Power Mac G3– or G4–based server• 64MB RAM minimum, 128MB RAM recommended• 1GB hard disk minimum, 6GB hard disk recommended• 10Mbps Ethernet minimum, 100Mbps Ethernet recommended

Requirements for running Macintosh Manager on AppleShare IP.

• PowerPC–based server, PowerPC G3 or G4 recommended• 80MB RAM minimum, 128MB recommended• 250MB hard disk minimum, 6GB hard disk recommended• 10Mbps Ethernet minimum, 100Mbps Ethernet recommended• AppleShare IP 6.1 minimum, AppleShare IP 6.3 recommended


Workstation Requirements

Requirements for running the Macintosh Manager 1.2 client software.

• Macintosh or Power Mac computer with a 68040 or PowerPC processor• Mac OS 8.1 or later• 32MB of RAM minimum, 64MB of RAM recommended

A new version of the Macintosh Manager client (v 1.2.2) will be available in December1999 adding support for earlier workstations including:

• Macintosh computers with a 68030 processor• Mac OS 7.6.1 or later• 16MB of RAM minimum, 64MB of RAM recommended

Summary

Macintosh Manager can actually further reduce the already low cost of managing aMacintosh network. It can provide your users with a consistent, controlled interfacewhile allowing them to access their documents from any workstation. The MacintoshManager client software is built into Mac OS 9 but is also available for earlier versions ofMac OS. The server software is included (or available for free) with each of Apple’s newserver products.

If you are interested in converting an existing At Ease for Workgroups network toMacintosh Manager, ready through Section II of this document. If you want to moveforward with a new Macintosh Manager install check the Resources section at the end ofthis document on how to get started.


Section II:

Migrating from At Easeto Macintosh Manager

Customers currently running At Ease for Workgroups are encouraged to move forward toMacintosh Manager and enjoy the many benefits it offers. The Macintosh Manager serverinstallation process (for both Mac OS X Server and AppleShare IP) includes conversionfeatures that provide a straightforward migration from an existing At Ease server. Users,workgroups, and documents are automatically converted to the Macintosh Managerenvironment with just a few installation steps.

Networks using At Ease for Workgroups commonly include a diverse mix of clientworkstations that may range from 68030/40–based systems to Power Macs and iMacs.These workstations may run a number of different operating systems in the Mac OS 7.xand 8.x families. The servers supporting these networks are normally PowerPC–basedand running AppleShare IP 5.0.x or 6.x.

New iMac, iMac DV, iBook, Power Mac G4 or any Mac OS 9–based Power Maccomputers are not compatible with At Ease for Workgroups. Macintosh Manger not onlyoffers support for these new clients but also continues to support the older machines,back to those using 68030 processors. With Macintosh Manager, the networkadministrator can manage a single network with clients running Mac OS 7, 8 and 9. Ofcourse, Mac OS 9 workstations will benefit from a number of new improvementsincluding substantially faster login times.

Some customers may choose to keep current At Ease systems running while transitioningto Macintosh Manager with new workstations; both management systems can co-exist onthe same network. It is recommended that both systems use AppleShare–based documentservers that can either be segregated or support both environments simultaneously.


Transition Strategies

Customers currently running At Ease for Workgroups should consider these options as away to transition forward to Macintosh Manager either as one single conversion or in aphased implementation. Network managers should decide which of the followingstrategies works best for their environment.

Migrating to a new Macintosh Manager server.

Customers can migrate the current At Ease for Workgroups structure to a new serverrunning Macintosh Manager. This would allow new, faster server hardware to be used forthe Macintosh Manager server running on either Mac OS X Server or AppleShare IP. Theclient workstations can then be updated to the Macintosh Manager 1.2 client software orMac OS 9 in order to access the updated server. (This scenario is detailed with step-by-step instructions on page 15)

Upgrading to Macintosh Manager on the existing server.

An existing At Ease for Workgroups server can be upgraded to Macintosh Managerrunning on AppleShare using the same server hardware. This would transfer the users,workgroups, and documents to the new Macintosh Manager structure. The clientworkstations can then be updated to the Macintosh Manager 1.2 client software or MacOS 9 in order to access the server. (This scenario is detailed with step-by-stepinstructions on page 18)

Establishing a new Macintosh Manager server for new workstations.

The existing At Ease for Workgroups server and clients can be left as is, but the At Easestructure is replicated to a new Macintosh Manager server, which will be used to supportthe new client workstations. It is a straightforward process to add the new MacintoshManager server, but users saving files on the Macintosh Manager server would not beable to access those documents if they used an At Ease client station; the reverse is alsotrue. To bridge the gap, you can have a central file server hold all user files for both theAt Ease and Macintosh Manager clients. Additionally, this file server could allowstudents to access their documents from any Mac or Windows client or even over theInternet. Additional information about this type of configuration can be found in Apple’sTechnical Information Library. (This option is subject to many factors unique to eachnetwork structure and is NOT detailed in a step-by-step fashion within this document.Additional sources of information are listed in the Resources section. Your Applerepresentative, reseller or sales agent may also have local services available to assistwith these transitions.)


Mac OS 9 clients coexisting as specialized workstations.

New Mac OS 9 clients can use the Multiple Users security feature to provide controlledaccess to the workstation. A generic user or guest account can be created within theMultiple Users control panel that allows controlled access to the workstation. Userswould then log on to the AppleShare server in order to access their documents. Users cansave their files to a personal folder located on the existing AppleShare/At Ease server.Individuals using those workstations will need to have accounts created withinAppleShare and assigned private data storage folders. Once this has been set up on oneworkstation, the structure can be replicated to other clients using Network Assistant 4.(This option is subject to many factors unique to each network structure and is NOTdetailed in a step-by-step fashion within this document. Additional sources ofinformation are listed in the Resources section. Your Apple representative, reseller orsales agent may also have local services available to assist with these transitions.)


Converting At Ease Serversto Macintosh Manager

Here are two scenarios providing step-by-step instructions on converting your At Easeserver to Macintosh Manager. These scenarios help describe transition options in moredetail. After finishing the steps to convert the server, you will be directed to theAdministering Macintosh Manager and Configuring Client Workstations section tocomplete the process.

Scenario 1: Converting an At Ease server to Macintosh Managerrunning on Mac OS X Server.

These are the suggested steps to follow when converting an existing At Ease forWorkgroups 5.02 server to Macintosh Manager.

Server Preparation

1. Set up the Mac OS X Server according to the Getting Started guide.2. Install and set up Macintosh Manager on the Mac OS X Server according to the

Getting Started guide, additional information can also be found at:http://til.info.apple.com/techinfo.nsf/artnum/n60087

3. Log out of all attached workstations.4. Stop the AppleShare IP File Server on the At Ease Server.5. Locate the At Ease Server 5.0 file in the Extensions folder.


6. Drag the At Ease Server 5.0 extension from the System Folder’s Extensions folder tothe Desktop.

7. Install the latest version of the AppleShare client software on your At Ease server andrestart the machine.

8. From the At Ease server, use the Chooser to log onto the Mac OS X Server as“Administrator” or “root” and mount the volume which contains the MacintoshManager Folder.

9. Locate the At Ease Server Prefs 5.0 file in the System Folder’s Preferences folder.10. Locate the At Ease Items WG 5.0 folder on the At Ease Server.

11. Copy the At Ease Server Prefs 5.0 file into the At Ease Items WG 5.0 folder.12. Copy the At Ease Items WG 5.0 folder from the current At Ease server volume into

the Macintosh Manager folder located on the Mac OS X Server volume.13. From any workstation, use a Java-enabled browser to access the Apple File Services

Remote Admin on the Mac OS X Server.14. Click on “File”, then “Disks and Share Points”; select the Macintosh Manager share

point and click “Change Enclosed Privileges”.


15. Click the “Change” button to apply the enclosing privileges to the At Ease Items WG5.0 folder.

16. Proceed to the Administering Macintosh Manager section

NOTE: This process would also be used when moving an existing At Ease server to newserver hardware and converting it to Macintosh Manager and AppleShare IP.


Scenario 2: Converting an At Ease server to Macintosh Managerrunning on the existing server with AppleShare IP.

The following are the suggested steps to follow when converting an existing At Ease 5.02server to Macintosh Manager.

Server Preparation

1. Log out of all attached workstations.2. Stop the AppleShare IP File Server on the At Ease server.3. Locate the At Ease Server 5.0 file in the Extensions folder.

4. Drag the At Ease Server 5.0 extension from the System Folder’s Extensions folder tothe Trash.

5. Restart the At Ease server.6. Locate the At Ease Items WG 5.0 folder on the At Ease server.7. Locate the At Ease Server Prefs 5.0 file in the System Folder’s Preferences folder.


8. Copy the At Ease Server Prefs 5.0 file into the At Ease Items WG 5.0 folder.9. Make a backup copy of the At Ease Items WG 5.0 folder and copy it to another disk

or location.

If you need to upgrade your server to AppleShare IP 6.3 follow these steps:

a. Restart the server with a Mac OS 9 CD in the CD drive. Hold down the C key whilerestarting to boot from the Mac OS 9 CD.

b. Run the Mac OS 9 Installer.c. Restart the server.d. Run the AppleShare IP 6.3 Installer application.e. Copy the new AppleShare IP Registry 6.3.1 file into the Extensions folder.f. Restart the server.


Proceed with Macintosh Manger conversion:

10. Install the Macintosh Manager 1.2 Server extension.11. Restart the server.12. Start AppleShare IP File Server.13. Copy the At Ease Items WG 5.0 folder into the newly created Macintosh Manager

folder.14. Proceed to the Administering Macintosh Manager section.


Administering Macintosh Manager andConfiguring Client Workstations

Management Workstation Preparation

1. Install the Macintosh Manager application on a Mac OS 9–based workstation.2. Launch the Macintosh Manager application3. Log in as the server administrator.4. The following dialog box will appear.

5. Click Yes.6. Make any additional management changes once the conversion is done.

Converting At Ease workstations to Macintosh Manager clients

7. Restart the At Ease workstations after you have upgraded the server.8. The following dialog box will appear on the At Ease workstations.

9. Click the Finder button.10. The following dialog box will appear.


11. Enter the At Ease administrator’s password.12. Once you are at the Finder, open the System Folder and the Extensions folder inside it

and locate the following three files: At Ease, At Ease Items WG 5.0, At Ease Startup.

13. Drag all three of the circled files to the Trash.14. Empty the Trash while holding down the Option and Command keys.15. Install the Macintosh Manager workstation software.16. Restart the workstations.


Adding Mac OS 9 clients to Macintosh Manager

1. Open the Multiple Users control panel.

2. Click the On button.

3. Click the Options button.


4. Click the Other tab.

5. Click the ‘Macintosh Manager account (on network)’ button.6. Click the Save button.7. Restart the workstation.


Custom Share Points andDocument Storage Options

If you have created custom document share points on your At Ease/AppleShare server oron other AppleShare servers for document storage and organization purposes, you willneed to log in to those share points as the share point owner PRIOR to launchingMacintosh Manager. This action will allow you to transition these custom share pointsfrom At Ease to Macintosh Manager.


Resources

The following resources can provide additional support for your transition to MacintoshManager.

AppleCare Support Site

The AppleCare support site provides several different information resources, includingthe Technical Information Library (TIL). The TIL is a database of technical articleswritten by AppleCare engineers that not only address a wide variety of product issues butalso provide anticipated answers to many questions regarding the usage andimplementation of Apple products. You can access the database via keyword selectionsuch as “at ease”. A list of documents is presented that contain the selected keywords;you view the specific information by selecting the document title. The AppleCare supportsite can be reached at: http://www.apple.com/support

Telephone Support

Telephone support is available for Apple products. The phone number to call is detailedin the support information included with your server. Please note your customer casenumber when using this service to enable better support for future escalations.

AppleCare Support Professional Series

The AppleCare Support Professional Series is Apple’s premier technical support programdesigned specifically for education, business, and government computing supportenvironments. It provides a central resource for Apple support. More information aboutthis service is located at:http://www.info.apple.com/support/applecare_products/supportpro/features.shtml

Apple Authorized Reseller or Sales Agent

Apple resellers and sales agents offer a high level of expertise through a variety of locallyoffered support and consulting programs. Check with your reseller to see what types ofservices they have available that can streamline your move to a managed network.

ANAT-Users – Apple Network Administrators Toolkit Discussion List

The ANAT-Users discussion list is an active mailing list sponsored by Apple thatconnects managers of Network Administrator, At Ease, and Macintosh Manager


networks. Lots of good ideas and helpful tips are exchanged via this mailing list.Subscription information can be accessed at:http://www.lists.apple.com/lists.taf?function=showlistsdetail&Layout_0_uid1=66

Tips and Tricks for Apple Network Services

This document is a collection of At Ease and Macintosh Manager setup strategies, tipsand ideas accumulated by John Detroye, Apple Advisory Systems Engineer. This isinformation is based upon various K-12 education implementations, but can be useful tonetwork managers in any environment. This document can be accessed at:http://www.geocities.com/Heartland/Ridge/8682/

© Apple Computer, Inc. All rights reserved. Apple, the Apple logo, AppleShare, AppleTalk, LaserWriter,Mac, Macintosh, PowerBook and Power Macintosh are trademarks of Apple Computer, Inc., registered inthe U.S. and other countries. Ate Ease, Finder, iBook, iMac and Power Mac are trademarks of AppleComputer, Inc. AppleCare is a service mark of Apple Computer, Inc. registered in the U.S. and othercountries. PowerPC is a trademark of IBM Corp., used under license therefrom. Other products andcompany names mentioned herein may be trademarks of their respective companies.

Date post:	27-Jul-2020
Category:	Documents
Upload:	others
View:	1 times
Download:	0 times

Managing Your Network with Macintosh Manager · 2018-08-30 · Managing Your Network with Macintosh...

Documents