8 ms·

Macs are some of the easiest things to administer because of the rock solid MDM, nuke and block, lost item mitigation (as soon as declared lost, can wipe remote

Macs are some of the easiest things to administer because of the rock solid MDM, nuke and block, lost item mitigation (as soon as declared lost, can wipe remotely, and even sometimes track via geolocation for filing police reports and for insurance claims). The pervasiveness and userfriendliness of filevault makes it so much easier than trying to enforce luks on linux. If you do encounter an OS level issue that can't be solved by first or 2nd tier local support, wiping from internet recovery is the next step, followed by sending it back to Apple (if you are within applecare) for direct replacement. The Apple Business team is incredible, and is much better than regular genius bar service at the apple store. They are pricy on the whole, but it's worth it if you have a need for macs in your environment.

mdekkers 3y ago
> Macs are some of the easiest things to administer because of the rock solid MDM, nuke and block, lost item mitigation (as soon as declared lost, can wipe remotely, and even sometimes track via geolocation for filing police reports and for insurance claims). All these things you mention are not “administration” in a “manage systems that end-users use”, they are “manage devices” activities. Macs have the literal worst business/enterprise administration administration/manageability experience. At previous $client, they had in excess of 30k desktops, and in excess of 50k total endpoints. They spawned a new opco, and that new opco wanted all macs. 12 months along, that was all thrown out because of the ongoing challenges of securing, managing, and administering the devices, and supporting the userbase. It wasn’t even a TCO thing (that was also wild, about 4x over a “regular” workplace, that being either Win10 or a supported Linux build), it was a “we never want to see Mac’s in the entire global organisation ever again. Macs have their place. There are plenty of environments where they can function adequately. Medium and Large Enterprise isn’t amongst those, and that is 100% due to the dire administration experience.
- Joeri 3y ago
  I wonder how apple manages their fleet. It would amuse me to no end to discover their own ops team is equally frustrated at the state of macOS.
  - saagarjha 3y ago
    JAMF I believe.
  - deleted 3y ago
    [deleted]
- deleted 3y ago
  [deleted]
- frizlab 3y ago
  > 12 months along, that was all thrown out because of the ongoing challenges of securing, managing, and administering the devices, and supporting the userbase. But did the admin team know about the macOS environment? We’re a Mac only environment in my company and the management AND securing of all the devices is trivial (can be done easily by one person for more than 100 devices with time to spare, and it’s scalable). But of course if the team is used to other OSes, they won’t know the tools and will find it difficult to manage Macs.
  - detourdog 3y ago
    this bas alsays been my experiencd.

mdekkers 3y ago

> Macs are some of the easiest things to administer because of the rock solid MDM, nuke and block, lost item mitigation (as soon as declared lost, can wipe remotely, and even sometimes track via geolocation for filing police reports and for insurance claims). All these things you mention are not “administration” in a “manage systems that end-users use”, they are “manage devices” activities. Macs have the literal worst business/enterprise administration administration/manageability experience. At previous $client, they had in excess of 30k desktops, and in excess of 50k total endpoints. They spawned a new opco, and that new opco wanted all macs. 12 months along, that was all thrown out because of the ongoing challenges of securing, managing, and administering the devices, and supporting the userbase. It wasn’t even a TCO thing (that was also wild, about 4x over a “regular” workplace, that being either Win10 or a supported Linux build), it was a “we never want to see Mac’s in the entire global organisation ever again. Macs have their place. There are plenty of environments where they can function adequately. Medium and Large Enterprise isn’t amongst those, and that is 100% due to the dire administration experience.

Joeri 3y ago
I wonder how apple manages their fleet. It would amuse me to no end to discover their own ops team is equally frustrated at the state of macOS.
- saagarjha 3y ago
  JAMF I believe.
- deleted 3y ago
  [deleted]
deleted 3y ago
[deleted]
frizlab 3y ago
> 12 months along, that was all thrown out because of the ongoing challenges of securing, managing, and administering the devices, and supporting the userbase. But did the admin team know about the macOS environment? We’re a Mac only environment in my company and the management AND securing of all the devices is trivial (can be done easily by one person for more than 100 devices with time to spare, and it’s scalable). But of course if the team is used to other OSes, they won’t know the tools and will find it difficult to manage Macs.
- detourdog 3y ago
  this bas alsays been my experiencd.