The strange tale of Active Directory support in OS X

http://www.centrify.com/ does a good job with AD on a mac from what I've seen, but we're running OD on our 3 xservers... however, that's not to say OD doesn't have some serious crap bugs in it... I can pinpoint 2 long weekend nights this year alone required rebuilding a server because of OD corruption. Most of these issues have been curtailed when we moved to webmin and stopped using the server manager after lots of DNS corruption. I blame their OS for so many 'hooks' into the files, forcing us to lock those files out of their control.

The reality is that even Leopard does not really improve the AD integration experience which is really about authentication. The only vendor that got it right in terms of AD integration with non-MSFT platforms is actually an ISV -- Centrify (http://www.centrify.com). As it relates to Mac OS X, Centrify actually delivers not only the authentication piece but also delivers Group Policies specific to the Mac OS X environment, ie it delivers full AD integration (authentication *and* policy).

Better AD support would be nice but i dont think its essential, we have some macs at work in the design studio and they sit pretty happily on their own. They have access to Exchange which is far more important through Entourage and file sharing isn't too much of an issue (though could be improved). From an administration point of view its not too bad with the macs being seperate, in a way its good. There are tons of issues Windows related with AD that bringing macs in too would most likely complicate the troubleshooting processs even more.

This blog is so apple like from my inside knowledge... and so depressive too.

So so much in the bank, I wonder why Apple simply did not buy Thursby and included Dave / AdmnitMac in the OS.

Apple SMB implementation is so pour, it's a shame. And seing 10.4 being worse than 10.3 in many accounts did not help...
:(

...

it cannot be a "top priority"
even ibm, sun, novell or redhat made that a "top priority"

because AD is a total controlled microsoft format (forget the fact AD can be connected with an ldap client, you cannot access all properties and functionalities that way)

of course theses products (os x, linux, solaris stuff) can , somehow, to be members of an AD realms. but there are no point for these enterprise to try to follow microsoft in that : they cannot.

they all tries to offers BETTER solutions less expensive to lure people out of Active Directory. and THAT is their top priority.

Ahh, I fixed it. Thanks!

TL;DR

prospective, eh?