Prev: Next generation iPhone found and dismantled!
Next: Airport Express alternative?
From: SteveH on 20 Apr 2010 15:18
Rob <patchoulianREMOVE(a)gmail.com> wrote:

> Because: "We don't support Macs because of problems with authentication
> and security", according to our (university) IT tech people.
>
> I could understand the support argument, but security and authentication?
>
> I'd asked if I could have access to a Mac to do some blunt editing of a
> pdf - they're installing Acrobat Pro on the work PC.

My employers have a similar system for their web-based VPN - similarly
they don't allow OSX.

--
SteveH
From: James Dore on 20 Apr 2010 15:54
On Tue, 20 Apr 2010 17:45:12 +0100, Jaimie Vandenbergh
<jaimie(a)sometimes.sessile.org> wrote:

> On Tue, 20 Apr 2010 17:36:05 +0100, Rob <patchoulianREMOVE(a)gmail.com>
> wrote:
>
>> Because: "We don’t support Macs because of problems with authentication
>> and security", according to our (university) IT tech people.
>>
>> I could understand the support argument, but security and
>> authentication?
>
> Is there a campus-wide Windows Active Directory domain (or group of
> domains) that all the Windows boxes authenticate against, and get
> their configuration, drive mount mappings, lock-down instructions etc
> from?

Maybe, but not a problem....

> Macs don't really integrate with that sort of thing much. They do a
> bit, but not the lockdowns - and if the campus IT rules were written
> daftly as if every workstation is Windows, then that would mean Mac
> and Linux machines are verboten because they don't support required
> features.

Oh yes they do! You can authenticate against AD with no problems:

System Preferences -> Users
Select Login Options.
Click the Join... button next to Network Account server.
Open Directory Utility, and Select Active Directory.
Give it an AD server IP address and credentials.
Authenticate against the Windows Domain.
"Enjoy"..... :-/

So that's double utter BS on the part of the University IT people in
question. They're dickheads talking bollocks.

>> I'd asked if I could have access to a Mac to do some blunt editing of a
>> pdf - they're installing Acrobat Pro on the work PC.
>
> Wince. Well, good luck.


Yeah, I got your security right her- oh, where'd that rootkit come from?

Cheers,
James

--
Using Opera's revolutionary e-mail client: http://www.opera.com/mail/
From: Jaimie Vandenbergh on 20 Apr 2010 15:58
On Tue, 20 Apr 2010 20:54:14 +0100, "James Dore"
<james.dore(a)new.ox.ac.uk> wrote:

>On Tue, 20 Apr 2010 17:45:12 +0100, Jaimie Vandenbergh
><jaimie(a)sometimes.sessile.org> wrote:
>
>> On Tue, 20 Apr 2010 17:36:05 +0100, Rob <patchoulianREMOVE(a)gmail.com>
>> wrote:
>>
>>> Because: "We don�t support Macs because of problems with authentication
>>> and security", according to our (university) IT tech people.
>>>
>>> I could understand the support argument, but security and
>>> authentication?
>>
>> Is there a campus-wide Windows Active Directory domain (or group of
>> domains) that all the Windows boxes authenticate against, and get
>> their configuration, drive mount mappings, lock-down instructions etc
>> from?
>
>Maybe, but not a problem....
>
>> Macs don't really integrate with that sort of thing much. They do a
>> bit, but not the lockdowns - and if the campus IT rules were written
>> daftly as if every workstation is Windows, then that would mean Mac
>> and Linux machines are verboten because they don't support required
>> features.
>
>Oh yes they do! You can authenticate against AD with no problems:

That was the "bit" I mentioned above. Authentication is useful, but
not very far reaching in terms of security: it's the Group Policy
stuff (security and user rights) that's so useful for locking down
Windows that I don't think can target Macs with much usefulness.

I may well be wrong - it was 10.4 I last played with that sort of
thing.

>So that's double utter BS on the part of the University IT people in
>question. They're dickheads talking bollocks.

Or following policy set by the ignorant. (In a University? How rare!)

Cheers - Jaimie
--
"The answer to the second question," said Merry, "is that we could get off
in an hour. I have prepared practically everything. There are six ponies
in the stable across the fields." -- J R R Tolkien
From: Gavin on 20 Apr 2010 17:02
On 2010-04-20 20:54:14 +0100, "James Dore" <james.dore(a)new.ox.ac.uk> said:

> Oh yes they do! You can authenticate against AD with no problems:
>
> System Preferences -> Users
> Select Login Options.
> Click the Join... button next to Network Account server.
> Open Directory Utility, and Select Active Directory.
> Give it an AD server IP address and credentials.
> Authenticate against the Windows Domain.
> "Enjoy"..... :-/
>
> So that's double utter BS on the part of the University IT people in
> question. They're dickheads talking bollocks.

So you have auth'd against the AD, well done.

So how will your admins control your access rights, internet access,
proxy, network, allowable installations etc etc etc....

The answer is, in a pure Windows AD, he cant.

TBF, I wouldnt allow a single Mac in a locked down Windows network either.

--
Gavin.  ACSP 10.5
http://www.stoof.co.uk
http://www.twitter.com/gavin_wilby

From: zoara on 20 Apr 2010 17:54
Elliott Roper <nospam(a)yrl.co.uk> wrote:
> In article <VJkzn.141359$4L6.126784(a)newsfe22.ams2>, Rob
> <patchoulianREMOVE(a)gmail.com> wrote:
>
> > Because: "We don’t support Macs because of problems with
> > authentication
> > and security", according to our (university) IT tech people.
> >
> > I could understand the support argument, but security and
> > authentication?
> >
> > I'd asked if I could have access to a Mac to do some blunt editing
> > of a
> > pdf - they're installing Acrobat Pro on the work PC.
>
> That would be your IT peoples' security and authenticity.
>

*like*

-z-

--
email: nettid1 at fastmail dot fm
First  |  Prev  |  Next  |  Last
Pages: 1 2 3 4
Prev: Next generation iPhone found and dismantled!
Next: Airport Express alternative?