Management tools: A missing piece of the Mac enterprise puzzle no more

Vendors bring Macintosh management features closer to par with Windows admin capabilities

As a senior technical support analyst at Harcourt Inc., Randy Rowles is happy that he gets to manage the educational publisher's 1,000 or so Macintosh systems — perhaps even a little smug, as Mac aficionados can be, about how the stability and ease of use of the systems makes his job so easy.

And with fewer Mac technicians needed than on the Windows side of the house, "our TCO from a support standpoint has always been lower," Rowles said, referring to total cost of ownership.

But Rowles confesses to long feeling "a bit of envy" toward his Windows counterparts for one thing that they had and he didn't: a plethora of powerful but easy-to-use tools for administering systems.

"It's always been an area of contention — like, 'How come THEY get this nifty tool?'" said Rowles, who works in Harcourt's Orlando office.

He noted that going back several years, the company's Windows systems administrators were able to centrally manage its 4,000 PCs, automating tasks such as tracking software licenses, enforcing group policies, and remotely deploying new software and patches. Meanwhile, Rowles and the other Mac admins were denied that luxury.

Rowles said that to track software licenses and updates on Macs, "we mainly relied on good record keeping — spreadsheets." And then actually deploying software or a patch "was a big pain in the butt. We would have to physically go from Mac to Mac to install software."

At the time, using Apple Inc.'s own Apple Remote Desktop tool to manage Macs was "possible, though not efficient," he added.

The times they have a-changed

But fast forward to today, and the picture is different.

Switching to Intel chips has made the Mac more competitive with PCs on price/performance measurements, while virtualization and the shift toward Web-based applications are rendering software incompatibility issues largely moot.

And in response to increased Mac sales overall as well as among some business users, management tools vendors are boosting their cross-platform capabilities and bringing their Mac administration features closer to par with their Windows capabilities.

For instance, LANDesk Software Ltd. on Tuesday rolled out Version 8.8 of its namesake suite of management tools. The South Jordan, Utah-based company said its software now lets IT administrators remotely control Macs from a PC running Windows Vista, and take more detailed inventories of their Macintosh systems and the software residing on them.

According to LANDesk, its Management Suite is used to manage more than a half-million Macs, in addition to a far greater number of PCs.

Terrence Cosgrove, a Gartner Inc. analyst, said via e-mail that among management tools vendors, LANDesk is furthest along in supporting Macs. He added that LANDesk Management Suite "can do OS deployment, data [and] settings migration, software distribution, inventory and remote control for Mac machines."

LANDesk said that one customer it declined to identify plans to increase the number of Macs used internally from about 400 now to 4,000 by year's end because of the new management capabilities. Version 8.8 already can administer and patch virtual machines, and late this year it will be able to manage Apple's iPhone devices, according to Coby Gurr, a business line manager at LANDesk.

The LANDesk Management Suite's next-closest competitor is Symantec Corp.'s Altiris Client Management Suite, a cross-platform software offering that a Symantec spokesman said is used by about 22,000 customers. The spokesman said Symantec doesn't have exact statistics on how many Macs are being managed with its software, but he added that "customer interest and sales of Altiris management solutions for the Mac skyrocketed in 2007."

Altiris has supported Macs since 2002. It introduced disk imaging and deployment features for the Apple systems last year, and the spokesman said that "more significant enhancements" are expected late in the year.

Better, but not all the way there

Even Apple has responded over the past several years, making many needed improvements to Apple Remote Desktop. That has pleased the growing number of Mac corporate sys admins, many of whom haunt Web sites such as and search desperately for tips on how to better manage their Apple machines.

But although Apple Remote Desktop can remotely control Windows and Linux systems in addition to Macs, it relies on the Virtual Network Computing protocol, which some consider too insecure to use in corporate settings.  As a result, Apple's software remains in practice a Mac-only tool.

So companies such as Harcourt, which now is part of Houghton Mifflin Harcourt Publishing Co. following an acquisition completed last month, have turned to cross-platform tools from third-party vendors such as LANDesk to manage both Windows PCs and Macs from a single console.

Rowles said that LANDesk's cross-platform capabilities are its biggest selling point for him. "I'd say that 90% of the Windows features I need are available for the Mac," he added.

Michael Gonzalez, a senior IT analyst at Baylor University in Waco, Texas, agreed with Rowles' assessment. "For what I use it for, LANDesk is dead-on equal for Windows and Mac," Gonzalez said.

About 800 of the 6,300 systems used by Baylor employees or within its labs are Macs, Gonzalez said. He noted that LANDesk's cross-platform capability enables the university's IT department to have a liberal attitude toward different hardware platforms. And that is resulting in an uptick in Mac usage, Gonzalez said.

Meanwhile, Rowles said that LANDesk's software has helped Harcourt reduce its TCO for Macs even further. That should result in the company boosting the overall percentage of Macs among its end-user systems in the coming years. Currently, that figures stands at about 20%.

So what's still missing?

Not everything that Rowles wants to see in LANDesk's Management Suite is there now. He said that the software has weaknesses when it comes to letting users directly set group policies into Microsoft Corp.'s Active Directory or the Mac's equivalent technology, which is called Open Directory.

And Rowles said he's cautious about giving too much credit at this point to LANDesk's new Mac remote-software deployment feature, which he has played around with. "It shows a lot of promise," he said politely.

Gartner's Cosgrove said another feature that cross-platform management vendors have largely failed to port over to the Mac is a so-called targeted software distribution capability, which lets administrators deploy software to users and not simply to PCs.

Computerworld's IT Salary Survey 2017 results
Shop Tech Products at Amazon