Why 'no Macs' is no longer a defensible IT strategy

More users are demanding Macs in the enterprise. Thanks to key computing shifts, supporting their appetite for Apple is now a straightforward option for IT

Once confined to marketing departments and media companies, the Mac is spilling over into a wider array of business environments, thanks to the confluence of a number of computing trends, not the least among them a rising tide of end-user affinity for the Apple experience.

Luckily for IT, many of those same trends are making it easier for tech departments to say yes to the Mac by facilitating IT's ability to provide enterprise-grade Mac management and support.

"We're seeing more requests outside of creative services to switch to Macs from PCs," notes David Plavin, operations manager for Mac systems engineering at the U.S. IT division of Publicis Groupe, a global advertising conglomerate. There are so many requests that Plavin now supports 2,500 Macs across the U.S. -- nearly a quarter of all Publicis' U.S. PCs.

And Plavin is less of an anomaly than you might think. Buoyed by increased interest in the consumer arena, Macs are cropping up in more and more organizations, in large part because end-users are pushing for them.

According to NPD Research, Apple's share of the retail market has climbed to 14 percent as of February 2008. Gartner and IDC report that the Mac's share in the U.S. as of March 31 was 6.6 percent. Alongside that home-based shift from PC to Mac is a significant uptake for Apple among businesses, as Forrester estimates organizational Mac adoption tripled last year to 4.2 percent, mainly on the backs of enthusiasts seeking approval for Apple's silver boxes in small workgroups.

Perhaps a better barometer of the trend is the effect increased Mac sales are having at outsourcing firms, which have traditionally been reluctant to support the platform due to a perceived lack of market in the past.

Centerbeam, a Windows management outsourcer for midsize businesses, is one such outsourcer eyeing the possibility of extending its services to cover the Mac, says Karen Hayward, Centerbeam's executive vice president. Security firm Kapersky Labs has already created a Mac version of its anti-virus software for release should Mac growth continue (and the Mac thus finds itself prey to more hackers), while Boingo Wireless, a Wi-Fi hotspot federator, is developing a Mac client to allow Mac users to tap into the Boingo network.

Couple this increasing attention to services with the falling away of another knock on the Mac, price, and you can see why even the federal government -- which has pockets of Mac users in a diverse set of agencies, including NASA, the U.S. Army, and the National Institute for Standards and Technology -- is prepping for increased use of Macs in business environments, having put together an official guide to implementing Mac security to conform to federal requirements.

After all, as Publicis' Plavin notes, Macs -- which cost the same as equivalently configured business-class PCs -- are cheaper to support because they are easier to support. And when it comes to diverting IT resources toward competitive advantage, doesn't ease of support sound compelling?

What has changed to make the Mac fit better
IT can embrace that Mac momentum, not just tolerate it, thanks to several shifts in computing that make the Mac a better enterprise fit than in the past -- first and foremost being a rising threat to Microsoft's other mainstay in the enterprise desktop environment, Internet Explorer.

Firefox, which has risen in popularity to account for 16.8 percent of browser use on the Web, according to Net Applications, as of December 2007, has broken IE's stranglehold on Internet app delivery, which it had maintained through ActiveX controls. Because Microsoft never released a version of IE for Mac OS X, Mac users were frozen out of ActiveX-based Web sites, making many SaaS (software as a service) offerings and enterprise-app Web clients off limits to the Mac.

[ Discover how to make Apple's other platform, the iPhone, fit in your business as well. ]

But to ensure operability on Firefox, developers had to configure their wares to support Java instead of or in addition to ActiveX -- with Mac gaining compatibility as a client at the same time.

WebEx is one of the more notorious examples of this switch. The popular Web conferencing tool became fully Mac-compatible only last month, as new owner Cisco Systems decided to abandon an ActiveX-only deployment strategy and add both Java and Mac-client options. (Until then, ReadyTalk and Adobe Connect were two of the few Mac-friendly Web conferencing tools, notes Peter Lincoln, IT director at temp-staff agency Aquent.)

Of course, not everyone is hip to the Java-based Firefox push. Many of MSN's excellent tools require Microsoft's browser due to the use of ActiveX, as do the support tools at a variety of companies with heterogeneous customers, including Seagate and AT&T.

Still, many other vendors have avoided ActiveX dependency and the customer exclusion that results. Those options have driven vendor choices in environments where heterogeneity is the norm, such as at college campuses. Southern Polytechnic State University in Georgia, for example, chose Juniper Networks' wireless VPN tool mainly because it didn't require a client on user devices, nor limit itself to ActiveX for on-the-fly client provisioning, which would have excluded the large number of Macs that students and faculty use on campus, says CIO Bill Gruzka.

The rise of Web-based computing
Another trend facilitating Mac use in business is the increased enterprise dependecy on SaaS, wherein a diverse array of applications -- from sales-force automation through supply-chain coordination -- is delivered through the browser. Most SaaS applications have not relied on ActiveX, given SaaS' inherent goal of making apps available to anyone, anywhere. This push toward platform agnosticism translates to the use of standards, letting the Mac right in. Ted Elliott, CEO of recruiting software provider Jobscience, says he has noted a rise in Mac customers now that Jobscience has moved to the SaaS model -- customers his Salesforce.com-based platform supports out of the box.

Beyond Firefox and SaaS, many enterprise app developers have adopted the Web as a portal to their apps, following the strong Web-portal drive of the late 1990s.

"The trend in the enterprise is to Web-enabled apps," notes Ezra Gottheil, an analyst at Technology Business Research. Thus, a Mac user can access Oracle or SAP ERP apps over the Web, regardless of whether there is a Mac-specific client available. Even Microsoft takes this approach to provide Mac compatibility in its SharePoint collaboration environment, which its Mac Office tools don't directly support. (More on Microsoft later.)

Mac-heavy organizations tend toward Web-based apps rather than packaged ones because of Mac compatibility issues, says IT director Lincoln. That's precisely what happened at his company, Aquent. Almost everything is hosted or available as a SaaS application, including sales-force management, ERP, Web conferencing, and anti-malware apps. Aquent's packaged apps are largely limited to Office, e-mail clients, and Web browsers.

Many mainstay, client-installed business apps -- Microsoft Office, IBM's Lotus Notes, Intuit QuickBooks, and the open source EnterpriseDB, for example -- come in mostly compatible Mac versions. And, of course, creative apps such as Adobe Creative Suite and QuarkXPress have long been cross-platform. But many of these, especially enterprise apps, "are late on the Mac and aren't as elegant as their Windows versions," says analyst Gottheil.

Compatibility: Physical and virtual
The rise of virutalization, as well as Apple's shift toward standardized PC components, has also helped pave the way for Mac use in business.

First Parallels Desktop, then EMC's VMware Fusion, enabled Apple's Intel-based Macs to run honest-to-goodness Windows, not just in a separate boot volume (Apple offered that capability a couple years ago with its free BootCamp utility) but within the Mac OS environment. Users can now run Windows-only apps in the Mac OS, or in a separate window if they prefer, with cut-and-paste, shared directories, and shared hardware access. Armed with virtual machines such as these, Mac users can access the full array of applications available to their Windows-based brethren.

And thanks to the Mac's move to standard PC components, such as Intel processors, USB ports, Ethernet ports, and 802.11 wireless capabilities, such compatibility uses are falling by the wayside. As late as the mid-1990s, Macs included a series of proprietary connections, such as LocalTalk and ADB, and tapped SCSI drive interface technology found only on high-performance PCs. This hardware divide complicated not only IT work but also application development. Most of these hardware issues have been rectified, leaving just a few special keyboard keys to map between Windows and Mac OS when developing cross-platform apps.

Managing Macs in the enterprise
If you concede that your Mac users can run any software they need, either directly or via a VM, you may raise an old IT canard: manageability.

It may surprise you that Mac OS X Server and the separate Apple Remote Desktop software have for a decade facilitated Mac management, providing functionality akin to any Windows-oriented management tool. Developed for Apple's education market, these tools allow you to manage OS updates and app installations and upgrades. With Apple's Automator tool, you can automate much of the management workflows, essentially by creating executable scripts. You can also configure your Macs to boot into a network volume, to cope with drive failure, or to provide visiting employees or guests a nonlocal copy of the OS.

Apple Remote Desktop also allows you to control a user's PC for troubleshooting and technical support, as well as inventory the Macs. And Apple doesn't charge a per-client license for the software, just $500 per copy installed on your administrators' Macs, supporting an unlimited number of clients. (You can also manage Windows and Linux clients using Apple Remote Desktop's VNC support.)

If you don't want an Apple-owned tool, consider FileWave's cross-platform management tools, recommends Publicis' Plavin. Or the cross-platform Client Management Suite from Symantec's Altiris unit, suggests Aquent's Lincoln.

For managing users, access control, and related security policies, Mac OS X Server's Open Directory works with Microsoft's ActiveDirectory, so you can apply ActiveDirectory permissions to and enforce policies on your Mac users and Mac-based file shares from ActiveDirectory. Or you can manage them from OpenDirectory, such as when you have a separate Mac workgroup whose initial policies you want to inherit from ActiveDirectory but then customize for that workgroup in Open Directory. Apple says it supports every one of Microsoft's ActiveDirectory services.

“False. Macs are incompatible with proprietary Microsoft standards. That is by Microsoft’s design.”

You are false. there are industry standards and there are open standards and proprietary standards Plenty of proprietary standards have become industry standards. You should know that. MSFT has been setting most industry standards for the last few years - taking the lead from IBM.

I will talk to some of my IP lawyers but I’m pretty sure ActiveX could be black roomed. Surely if they could black room IBM bios and many other products - ORCL DBMS, I’m pretty sure somebody could.

AAPL does not do it because they do not care, not because they can’t.

I know ActiveX sucks but I need it.

The Dewalt works out in the field - as long as the battery is up.

Do you have any idea what it costs to run a 1/2 mile of 110?

The Dewalt at $250 is a lot cheaper for me to use than the $20 Chicago.

And for a Wall Street guy or many Doctors unfortunately its Windows. Sucks but a fact of life.

Delta last time I flew I could not print the boarding pass on Safari.

I flew Delta in October... Safari printed my boarding pass with no problem.

The dilemma for some people using MS Office is that the old Mac versions do not open the new file formats and the new ones do not run macros.

And who's fault is that? Certainly not Apple's. These are DELIBERATE anti-competitive moves by Microsoft. It is Microsoft that refuses to release the details of their new file structures... and the ones who removed Visual Basic from the Mac version of Office... and delayed the use of their new file system on Macs... all deliberately.

Despite losing their anti-trust case, they haven't changed any of their anti-competitive behaviors. All of this is designed to keep you on the Microsoft farm.

“But MSFT is worlds ahead of AAPL and IBM in setting industry MSFT proprietary standards for real world business applications.”

I do not agree with your semantic game. Industry standards is what the industry standardizes on. Some are from open or consortium sources and some are from vendors.

Meanwhile are you denying my claim that MSFT had gotten developers by the balls and the result is a ton of Windows only business apps?

Open your eyes man.

Don’t confuse me with those that thinks this is a good idea. It is just a fact.

Try to run the hottest EMR or Practice Management Apps on a Mac - go ahead - try.

Actually a lot of my clients ARE doctors... and some of them use Mac Practice Management Apps with no problem at all. One is using a Windows MPM in a Windows window in Mac OSX and uses the Mac for everything else. He's sampling some of the Mac apps that are available to drop the Windows app.

I'm an IT Director. I've come from a publishing company that was a mixed house.

Macs are no pleasure in a mixed business network. We even brought them into our domain via Open Directory. What a let-down. Is Open Directory still laughably anemic?

Because that's where the rubber hits the road for network admins. It was, at least a year ago, a joke.

“And who’s fault is that?”

I think that is part of the issue. The bigger part it is a fact and AAPL does not care.

I went to Common a couple of weeks ago the BP would not print. I called delta and they said, “you need IE6 or greater to print.” Maybe new ActiveX. Not sure. Who the heck knows. I know developers love to do this kind of stuff and there has not been a browser independent rule at delta. Maybe you should write one of your famous letters.

The Dewalt works out in the field - as long as the battery is up.

Do you have any idea what it costs to run a 1/2 mile of 110?

The Dewalt at $250 is a lot cheaper for me to use than the $20 Chicago.

Thanks for making my point for me. ;^)>

“Thanks for making my point for me. ;^)>”

Thanks for making my point. Horses for courses and users should be careful to make sure the tool meets the job. In some cases Mac is not up to the job. Before buying users should check their apps and websites.

I too have trouble getting the cover off some computers but I have found when you use these methods it is impossible to put the covers back on.

Two words: Duct Tape.

"That was a comment. His comment about "probably" making more money than you is less offensive than your generalization that people in the art department being "flaky" (Dictionary definition: Crazy or eccentric) is hardly an attack."

Thanks for the support. Your patience on this list continues to amaze me. Believe me, you are appreciated.

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.