Integrating Apple Mac products to Windows AD


Were considering adding Macs to our Offices and we need to integrate them to our AD as we want some degree of control.

What is considered the best practice integrating Mac's ?
Checked some online forums etc. and it seems you could either buy a third party service that integrates Mac policies into your AD or you could run a separate OS X server that will act as a sort of DC for Macs.

Running a OS X server seems to me to be the preferred choice, as you don't need to meddle with AD with some third party software.

To use OS X server, all you need is a Mac that runs the latest OS with OS X server(20 Bucks) installed ?
*Could you also install OS X on a server with an intel CPU and let OS X Server run from there ?

Could really use pointers to the best way to achieve this.

Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Chris MillardCommented:
OS X only works on Apple's own products. There is an unofficial way of getting it to run on other Intel platforms, but it isn't supported and I certainly wouldn't trust it in a working environment.

But yes you are right - any Mac with the latest OS X and the server product.

What are looking to control exactly?
Eoin OSullivanConsultantCommented:
Best practice is generally to use a mac computer with OSX Server add-on software to manage macs using Open Directory and link that to your AD.  See Apple's own documentation here

You CANNOT install OSX on any Intel server (as it invalidates the Apple Software license) it must be Apple Hardware.  A basic MacMini is fine as a small office OSX Server.

The alternative is to use something like ADmit Mac -
 or Centrify -

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
LenblockAuthor Commented:
What we're aiming for is:
Join Mac's to our domain.
To be able to have some similar control with policies that we have for Windows Computers.
Policies for web, password, software, office, File Shares etc.
nappy_dThere are a 1000 ways to skin the technology cat.Commented:
In general for Mac management, an OS x server may not be what you need. Take a look at It's a tool that allows Mac management via AD and the mmc console interface your sysadmins are already familiar with so the learning curve is not as great.

Eoinosullivan has touched on this as well.
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Mac OS X

From novice to tech pro — start learning today.