Recommended
Recommended
More Related Content
What's hot
What's hot (20)
Viewers also liked
Similar to Security Challenges: Integrating Mac Computers into Windows Environments
Similar to Security Challenges: Integrating Mac Computers into Windows Environments (20)
Recently uploaded
Recently uploaded (20)
Security Challenges: Integrating Mac Computers into Windows Environments
- 1. Security Challenges: Integrating Macs into Windows Environments Roundtable Discussion Presented by
- 2. • Introductions • Mac Management With Configuration Manager • Security Challenges of Mac Management with Configuration Manager • Parallels Mac Management • Demo - How Parallels can Assist with Security Challenges • Special Limited Offers for Webinar Attendees • Q & A Agenda Security Challenges: Integrating Macs into Windows Environments
- 3. Introductions: Parallels Parallels Software enables IT teams to support their evolving cross-platform environments with virtualization and management solutions that help organizations take advantage of the best technology out there, whether it’s Mac®, Windows®, iOS, AndroidTM, or the cloud. Carlos Capó Sr. Manager, Global Business Solutions ccapo@parallels.com
- 4. Introductions: Windows Management Experts, Inc The premier Microsoft System Center solution integrator for companies that are committed to installing, implementing and more effectively managing their environment using Microsoft System Center technologies. Michael Handley Lead System Center Consultant mhandley@winmgmtexperts.com
- 5. Mac Management With Configuration Manager (ConfigMgr) Having Macs in your environment that are not managed is a big security risk, Configuration Manager can now natively manage your Mac environment. • Enroll Mac OS X clients • Deploy Settings • Hardware Inventory • Deploy Applications Configuration Manger will need additional items to support the Macs: • Public Key Infrastructure (AD CS) • Site server with Internet FQDN • HTTPS-enabled Management Point and HTTPS-enabled Distribution Point • Enrollment Point and Enrollment Proxy Point • Client Settings configured
- 6. Security Challenges of Mac Management with ConfigMgr 1. Must have PKI infrastructure and additional ConfigMgr 2. No Automatic Enrollment of Devices 3. Limited Compliance settings, only through scripts no OSX profiles 4. Can’t enable or manage device encryption 5. Can only push software through application model 6. No automated OS X patching available 7. No Operating System Deployment 8. No remote control from console
- 7. • Discovery & Enrollment • Inventory • Enforce Compliance • Administer FileVault 2 • Software & Patch deployment • OS X Patch Management • Self-Service Application Portal • OS X image deployment • Task Sequence steps support • Reporting Parallels Mac Management: Key Management Functionality for Apple Mac Hardware via ConfigMgr
- 8. Parallels Mac Management vs. ConfigMgr Parallels ConfigMgr Discovery and Enrollment Network discovery and automatic enrollment Manual enrollment Inventory Hardware and software inventory Collect AppleCare warranty status Compliance Deploy Mac OS X Configuration Profiles Easy to use OS X Configuration Profile editor Push scripts as SCCM Configuration Items Enable FileVault 2 encryption Escrow and retrieve FileVault 2 personal keys
- 9. Parallels Mac Management vs. ConfigMgr Parallels ConfigMgr Software and Patch Deployment Deploy software via SCCM Package Deployment Deploy software via SCCM Application Deployment Self-Service Application Portal for Macs Silent & interactive deployment modes OS X Image Deployment Deploy OS X images via SCCM Support for SCCM Task Sequences and Task Sequence steps Remote Assistance Remote Assistance via VNC and SSH Configuration Works without PKI infrastructure
- 10. • Parallels Proxy a service app that acts as a proxy between ConfigMgr and Macs. • Parallels Mac Client enables communication between the Mac computer and the Proxy. • Admin Console Extensions extend the ConfigMgr console to provide a graphical UI enabling you to manage Macs. • NetBoot Server optional component needed for OS X imaging • OS X Software Update Point a service app that publishes Apple Software Updates to ConfigMgr Deploying Parallels Mac Management
- 11. Demo - How Parallels can Assist with Security Challenges
- 12. Special Offers Parallels • Save $500 on Your first Purchase of Parallels Mac Management • Receive 1 Free Certification Training for Parallels Mac Management • $1500 Savings for webinar attendees • Offer valid for purchases made by August 31, 2016 Windows Management Experts • $500 off services with any engagement of 40 hours or more! • Go to http://www.windowsmanagementexperts.com/contact-us or • Call 206.778.4432 and • Mention promo code PARALLELS.
- 13. Thank you for Attending Questions?
- 14. Appendix
- 15. OS X Patch Management Parallels Mac Management v4.5 adds “Apple” category to the properties of Software Update Point Component (located under Administration Overview Site Configuration Sites
- 16. OS X Patch Management Apple updates appear under All Software Updates folder
- 17. OS X Patch Management Just like with PC updates, you need to create a Software Update Group and then deploy it to a collection with Macs.
Editor's Notes
- About four years ago Parallels decided that something has to be done about this problem. For the reasons I mentioned on the previous slide, we didn’t want to implement a stand-alone management system. According to Microsoft, SCCM is used in approx. 70% of mid and large enterprises. And after doing our own market research, we decided to create a Mac management plug-in for SCCM. And that is how Parallels Mac Management was born. With Parallels Mac Management plug-in our goal is to allow organizations to maximize investments that they already made into SCCM deployments and to allow them to use SCCM as the single pane of glass. Parallels Mac Management plug-in extends SCCM’s rich centralized management capabilities to Macs and allows IT administrators to: go through the list
- This slide is very popular among people who hear about Parallels Mac Management for the first time. We often hear this question: “what are the differences between Parallels Mac Management and SCCM’s native Mac management capabilities’. Some of you probably know that starting with SCCM 2012 SP1 Microsoft implemented some basic Mac management capabilities. For Microsoft Mac management is really a checkbox feature, they are not interested in promoting and supporting Macs. So we created two slides to showcase differences between Parallels Mac Management and the native Mac management in SCCM. As you can see, there are lots of red dots in the Parallels column, and not that many dots in the SCCM column.
- And continuing to the second slide, same story Parallels Mac Management is clearly offers a lot more Mac management capabilities comparing to the Microsoft’s implementation. I want to highlight the last item: Parallels Mac Management works without PKI infrastructure. One of the most common complains about Microsoft’s Mac management implementation is that it requires PKI infrastructure in order to be able to manage Macs. In case of Parallels Mac Management we support both: HTTP-only mode and HTTPS / PKI SCCM
- Fig: Sample deployment diagram in multi-site SCCM environment Let’s get technical for a moment. Parallels Mac Management consists of three core components: Parallels Proxy – this is a Windows service that acts as proxy between SCCM and managed Macs. Parallels Mac client – it enables communication between the Mac, the Proxy service and SCCM infrastructure. Note, we do not use native SCCM Mac client we have our own. And last component is SCCM Admin Console Extensions – the extensions add UI to the Admin Console that enables Mac management. As I said previously, Parallels Mac Management integrates with existing SCCM infrastructure and doesn’t require you to deploy any new servers. In most of the cases you will be installing Proxy on a server that already hosts one or several SCCM components. And, of course, the Admin Console Extensions must be installed on a computer the has SCCM Admin Console installed.