TweetFollow Us on Twitter

An Apple Remote Desktop Critique

Volume Number: 20 (2004)
Issue Number: 12
Column Tag: Programming

Patch Panel

An Apple Remote Desktop Critique

ARD is Much Better in Version 2.1, But Still Needs A Lot of Work

by John Welch

As you can tell from the title, this article is going to be a critique of Apple's remote system management tool, Apple Remote Desktop, or ARD, to the, well, ARD cognoscenti. While it is, especially in version 2.1, a much improved tool over earlier versions, (it's actually useful to more than just K-12 lab Admins now), it still has a few critical areas that need work if it is to move into the next level.

Packaging

ARD needs to be bundled with Mac OS X Server, period. To sell a server that can handle thousands of clients, and then give no way to manage those clients without laying out another few hundred dollars is silly. If I'm buying an Xserve, I need client management tools. It's not like Apple has to license it, and there's no problem with selling it separately, but it needs to be shipped as part of Mac OS X Server. I still see people on mailing lists trying to do things manually, when ARD would be a great help, but after having spent money on Server, there's sometimes a bit of a hurdle getting another P.O. approved because Apple doesn't' think you need client management tools as a part of their server. Compare this to Active Directory, which ships with basic client management as part of Windows Server. Bundling ARD with Mac OS X Server would fill a basic need of network administrators everywhere. (Yes, Apple does ship SSH with Mac OS X, and they do have excellent command line tools. However, the documentation for those tools is a bit...shall we say light.)

Even better: integrate ARD in with Server Admin and Workgroup Manager. This would allow an administrator, when setting up a remote client or user in Workgroup Manager, to easily bring up the client in an ARD window, and test out the various login settings, MCX settings, etc. Integration with Server Admin would allow administrators to better deal with various tools that work better when you can see the screen, or allow administrators who are not yet comfortable with the command line to not have to start swimming in the deep end of the pool, with the drain suction on 'high'.

Another issue for the enterprise is the pricing. At first glance, ARD is one of the cheapest tools out there. However, that's more for if you have a single, or very limited number of administration workstations. In a large network, or an enterprise setup, that's not always going to be the case. If you need multiple administration machines, ARD's price starts to go up in $500US increments. What is needed is perhaps an "Enterprise" version that would allow for unlimited administration workstations in a root domain, so for example, you could have unlimited administration workstations for company.com, and that would include all the subdomains a company might have, like nyc.company.com, etc. This could be based either on DNS, or (more logically), Open Directory domains.

Automation

Another area where ARD suffers is in automation. True, you can now run shell commands directly on clients, but that's a rather manual process. There's no provision for kicking off other commands based on the results, because the ARD itself cannot be scripted, via shell, or AppleScript. Which means that while I can run softwareupdate -l on 500 Macs, I can't have the results of that kick of any automated update process. Automation is critical to administrators, because as your client base goes up, your workload tends to increase by multiples of that increase. A tool that almost lets you automate, or forces you to have manual steps with what little automation it allows you to do is almost a hindrance, not a help.

ARD needs full OSA and shell support, so that automation can happen independently of language provisions. Mac OS X is living in a world of shell, AppleScript, python, Perl, and . While it would be ridiculous to expect Apple to create interfaces for a dozen different languages, full OSA support, (including the ability to directly use shell as an OSA language, something long overdue in OS X), would create the interface so that administrators could use whatever language they feel most productive with, or need to use for their specific workflow.

By implementing OSA support in AppleScript, ARD would become a much better, and more capable tool. If you look at almost any other administration tool on any other platform, they're all scriptable. In fact, there are sites devoted to custom implementations of things like Active Directory tools, Nagios, MRTG, etc., and almost all of them are collections of scripts that someone else decided to donate to a larger community so that their work could benefit others. This kind of community is critical to administrators using those tools, but there's no way to do this kind of thing in ARD.

Directory Service Integration

Mac OS X Server is based on Open Directory, so is Mac OS X. Open Directory is at the heart of everything Apple does for managing machines, yet ARD is resolutely ignorant of Open Directory. Again, yet another way that ARD makes life harder than it should be on its users. There needs to be, as part of integration with Server Admin, a setting that allows you to assign usage privileges to ARD based on user and group settings. So you could create an ARD administrator group or groups, each having different levels of access. This way, creating a new ARD user is a matter of drag and drop in Workgroup Manager. This doesn't require the upcoming ACL structure in Mac OS X 10.4, aka Tiger. Those of course, would make it simpler, because ARD privileges could be a separate ACL setting, which could be applied across a directory.

This is not to say that ARD should require an Open Directory setup to function. That would be just as big of a mistake in the opposite direction. But the need for a client management tool to plug into the client management infrastructure is too obvious to ignore.

Interface and Functional Issues

The rest of any problems with ARD are interface/functional issues. For example, while copying files from the administration workstation to clients is quite simple, copying files from the client to the administration workstation forces you to do a find, find the files you need in the result of the find, click copy, then pick the destination. While this is great if you need to copy one or two files from a couple hundred workstations, that's not how that particular operation works in a large percentage of cases. (Where you see that particular model used the most is in a lab setup. However, Apple networks aren't just for K-12, or Higher Ed labs anymore, and tools like ARD need to reflect this.) For a single file, or folder, ARD should just let you drag it from the client workstation to the administration workstation the same way that you would move files and folders from a network share to your local hard drive. This is also where a scripting interface would be more than a little handy. Being able to use the Unix locate or find tools with ARD would not make administrators cry.

While it's great that Apple is using VNC as the low-level protocol, they haven't done a lot to help ARD users who are not familiar with VNC to more easily get ARD talking to Windows or Linux boxes running VNC. Again, the mailing lists are full of the same kind of question, which shows the difference between merely making a feature available, and making it useful. Spending a little more time to make using the VNC feature easier would pay off quite well.

ARD also needs to talk to other installers. Yes, in a perfect world, (or at least Apple's definition of one) we all use drag and drop disk images, or Apple's Installer. However, in the real world that we all have to work in, we don't. For example, since Installer VISE is cross platform, and Apple's Installer is not, it makes little sense for a company like Adobe, where you have a great deal of similarity between the Mac and Windows versions of their software, to not use an installer technology that saves them time and money by allowing them to use one tool for all their installer needs. Apple needs to recognize this, and either integrate both Allume's Stuffit InstallerMaker, and MindVision's Installer VISE into ARD, or build a plugin architecture into ARD with a proper API so that third parties can extend ARD as needed. (The plugin architecture, while not the best short - term solution, ends up being the better long-term solution for this problem, and every other problem that we haven't even encountered yet. Just ask Adobe and Quark about how beneficial plugins are.) The "just install and image" or "just install, then repackage" arguments are workarounds for NIH, not solutions for the enterprise, (whatever your definition of 'enterprise' is. I worked at MIT, I'll put their network up against any similarly sized corporate network any day of the week. '.edu' does not mean 'tinkertoy'.)

Another issue is security. ARD needs to be able to connect through SSH tunnels as a basic functional part of the client and the administration workstations. SSH ships with Mac OS X, and should be integrated into the connection setup by default. Any kind of administrative connection across a network of any kind needs to be secure by default, and by known, trusted measures. Since Mac OS X and Mac OS X server ship with multiple secure authentication and encryption methods, (SSH, SSL, Kerberos), and Apple uses SSL in its other administration tools, such as Server Admin, there's little reason for not having ARD plug into these methods as well. It's one thing to say "It's secure, trust us" and another thing to say, "It's secure, here are the industry standard methods we use". (Note: Yes, I'm aware that you can manually tunnel ARD or anything else through SSH. That's not the point. It shouldn't require manual or even shell scripted setup. It should be an enabled-by-default checkbox on the install, enabled by default in the client and administration configuration, and enabled by default in the usage. Secure modes of operation need to be the unconscious default, not the manual option.)

Conclussion

Again, ARD has steadily improved throughout its history, and the features in version 2, now 2.1 are enough of an improvement for me to switch over to it from Timbuktu. The integration with VNC was brilliant and obvious, and I'm glad to see that Apple agreed with everyone else on this.

Most of what I base this critique on are things that constitute the "last 20% of excellence". (From the idea that the first 80% of work on a product make it functional and 'good enough', but it's the last 20% that make it "insanely great". Microsoft is the master of the first 80%, but Apple is the master of the last 20%, and that difference shows in almost everything they do.) ARD is so close to being one of the top - notch client management tools on any platform (and on every platform with VNC), and with just a little massaging, it'll get there.


John Welch (jwelch@provar.com) is an IT Staff Member for Kansas City Life Insurance, a Technical Strategist for Provar, (http://www.provar.com/) and the Chief Know-It-All for TackyShirt, (http://www.tackyshirt.com/. He has over fifteen years of experience at making Macs work with other computer systems. John specializes in figuring out ways in which to make the Mac do what nobody thinks it can, showing that the Mac is a superior administrative platform, and teaching others how to use it in interesting, if sometimes frightening ways. He also does things that don't involve computertry on occasion, or at least that's the rumor.

 
AAPL
$116.57
Apple Inc.
+0.26
MSFT
$48.70
Microsoft Corpora
+0.00
GOOG
$538.89
Google Inc.
+4.06

MacTech Search:
Community Search:

Software Updates via MacUpdate

Cyberduck 4.6 - FTP and SFTP browser. (F...
Cyberduck is a robust FTP/FTP-TLS/SFTP browser for the Mac whose lack of visual clutter and cleverly intuitive features make it easy to use. Support for external editors and system technologies such... Read more
Maya 2015 - Professional 3D modeling and...
Maya is an award-winning software and powerful, integrated 3D modeling, animation, visual effects, and rendering solution. Because Maya is based on an open architecture, all your work can be scripted... Read more
Evernote 6.0.1 - Create searchable notes...
Evernote allows you to easily capture information in any environment using whatever device or platform you find most convenient, and makes this information accessible and searchable at anytime, from... Read more
calibre 2.11 - Complete e-library manage...
Calibre is a complete e-book library manager. Organize your collection, convert your books to multiple formats, and sync with all of your devices. Let Calibre be your multi-tasking digital... Read more
Herald 5.0.1 - Notification plugin for M...
Note: Versions 2.1.3 (for OS X 10.7), 3.0.6 (for OS X 10.8), and 4.0.8 (for OS X 10.9) are no longer supported by the developer. Herald is a notification plugin for Mail.app, Apple's Mac OS X email... Read more
Firetask 3.7 - Innovative task managemen...
Firetask uniquely combines the advantages of classical priority-and-due-date-based task management with GTD. Stay focused and on top of your commitments - Firetask's "Today" view shows all relevant... Read more
TechTool Pro 7.0.6 - Hard drive and syst...
TechTool Pro is now 7, and this is the most advanced version of the acclaimed Macintosh troubleshooting utility created in its 20-year history. Micromat has redeveloped TechTool Pro 7 to be fully 64... Read more
PhotoDesk 3.0.1 - Instagram client for p...
PhotoDesk lets you view, like, comment, and download Instagram pictures/videos! (NO Uploads! / Image Posting! Instagram forbids that! AND you *need* an *existing* Instagram account). But you can do... Read more
SuperDuper! 2.7.3 - Advanced disk clonin...
SuperDuper! is an advanced, yet easy to use disk copying program. It can, of course, make a straight copy, or "clone" -- useful when you want to move all your data from one machine to another, or do... Read more
MacJournal 6.1.5 - Create, maintain, and...
MacJournal is the world's most popular journaling software for the Mac. MacJournal 6 adds a calendar mode that show entries from any journal, geolocation, word count, and progress tracking, as well... Read more

Latest Forum Discussions

See All

Quest for Revenge (Games)
Quest for Revenge 1.0.0 Device: iOS Universal Category: Games Price: $4.99, Version: 1.0.0 (iTunes) Description: The great Kingdom of the west has fallen. The gods ignore the prayers of the desperate. A dark warlord has extinguished... | Read more »
Threadz is a New Writing Adventure for Y...
Threadz is a New Writing Adventure for You and Your Friends Posted by Jessica Fisher on November 21st, 2014 [ permalink ] In the tradition of round-robin storytelling, | Read more »
SteelSeries Stratus XL Hardware Review
Made by: SteelSeries Price: $59.99 Hardware/iOS Integration Rating: 4 out of 5 stars Usability Rating: 4.5 out of 5 stars Reuse Value Rating: 4.25 out of 5 stars Build Quality Rating: 4.5 out of 5 stars Overall Rating: 4.31 out of 5 stars | Read more »
ACDSee (Photography)
ACDSee 1.0.0 Device: iOS iPhone Category: Photography Price: $1.99, Version: 1.0.0 (iTunes) Description: Capture, perfect, and share your photos with ACDSee. The ACDSee iPhone app combines an innovative camera, a powerful photo... | Read more »
ProTube for YouTube (Entertainment)
ProTube for YouTube 2.0.2 Device: iOS Universal Category: Entertainment Price: $1.99, Version: 2.0.2 (iTunes) Description: ProTube is the ultimate, fully featured YouTube app. With it's highly polished design, ProTube offers ad-free... | Read more »
Weather or Not - Reports and Forecasts...
Weather or Not - Reports and Forecasts for your Calendar 1.0.0 Device: iOS iPhone Category: Weather Price: $2.99, Version: 1.0.0 (iTunes) Description: Weather or Not is a beautiful and intuitive way to check the weather and... | Read more »
Sago Mini Road Trip (Education)
Sago Mini Road Trip 1.0 Device: iOS Universal Category: Education Price: $2.99, Version: 1.0 (iTunes) Description: Go for a fun-filled drive with Jinja the cat. Pick a destination, select a vehicle and hit the road. What will Jinja... | Read more »
New Tower Defense Game, Kingdom Rush: Or...
New Tower Defense Game, Kingdom Rush: Origins, is Available Today Posted by Jessica Fisher on November 20th, 2014 [ permalink ] iPad Only App - Designed for the iPad | Read more »
Sunburn! (Games)
Sunburn! 1.0.0 Device: iOS Universal Category: Games Price: $2.99, Version: 1.0.0 (iTunes) Description: Your ship is gone. Your crew is scattered. One option remains. Gather your crew... and jump into the sun. Reunite your... | Read more »
Tapventures Review
Tapventures Review By Jennifer Allen on November 20th, 2014 Our Rating: :: ODDLY COMPELLINGUniversal App - Designed for iPhone and iPad Tapventures is an increasingly hands-off one-tap RPG, but expect it to hook you despite your... | Read more »

Price Scanner via MacPrices.net

Apple Expected to Reverse Nine-Month Tablet S...
Apple and Samsung combined accounted for 62 percent of the nearly 36 million branded tablets shipped in 3Q 2014, according to early vendor shipment share estimates from market intelligence firm ABI... Read more
Stratos: 30 Percent of US Smartphone Owners t...
Stratos, Inc., creator of the Bluetooth Connected Card Platform, has announced results from its 2014 Holiday Mobile Payments Survey. The consumer survey found that nearly one out of three (30 percent... Read more
64GB iPod touch on sale for $249, save $50
Best Buy has the 64GB iPod touch on sale for $249 on their online store for a limited time. Their price is $50 off MSRP. Choose free shipping or free local store pickup (if available). Sale price for... Read more
15″ 2.2GHz Retina MacBook Pro on sale for $17...
 B&H Photo has the 2014 15″ 2.2GHz Retina MacBook Pro on sale for $1799.99 for a limited time. Shipping is free, and B&H charges NY sales tax only. B&H will also include free copies of... Read more
New Logitech AnyAngle Case/Stand Brings Flexi...
Logitec has announced the newest addition to its suite of tablet products — the Logitech AnyAngle. A protective case with an any-angle stand for iPad Air 2 and all iPad mini models, AnyAngle is the... Read more
2013 15-inch 2.0GHz Retina MacBook Pro availa...
B&H Photo has leftover previous-generation 15″ 2.0GHz Retina MacBook Pros available for $1499 including free shipping plus NY sales tax only. Their price is $500 off original MSRP. B&H will... Read more
16GB Retina iPad mini on sale today for $199,...
 Staples has 2nd generation 16GB Retina iPad minis on sale for $199 on their online store for a limited time. Their price is $100 off MSRP. Choose free shipping or free local store pickup (if... Read more
Developers Start Designing Apps for Apple Wat...
Apple has announced the availability of WatchKit, software that gives developers a set of tools to easily create experiences designed specifically for Apple Watch. Apple’s developer community can now... Read more
C Spire Launches iPad Air 2 and iPad Mini 3 o...
C Spire has announced that iPad Air 2 with Wi-Fi + Cellular and iPad mini 3 with Wi-Fi + Cellular are now available on its 4G LTE network. C Spire offers both new iPads with a range of data plans... Read more
Are You On Your Last PC? – The ‘Book Mystique
Will your current PC be your last? Quite possibly so if you define “personal computer” as a traditional desktop or laptop form factor machine according to some commentators. So then, the upshot that... Read more

Jobs Board

*Apple* Solutions Consultant (ASC)- Retail S...
**Job Summary** The ASC is an Apple employee who serves as an Apple brand ambassador and influencer in a Reseller's store. The ASC's role is to grow Apple Read more
Project Manager, *Apple* Financial Services...
**Job Summary** Apple Financial Services (AFS) offers consumers, businesses and educational institutions ways to finance Apple purchases. We work with national and Read more
*Apple* Store Leader Program - College Gradu...
Job Description: Job Summary As an Apple Store Leader Program agent, you can continue your education as you major in the art of leadership at the Apple Store. You'll Read more
*Apple* Retail - Multiple Positions (US) - A...
Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, you're also the Read more
Senior Event Manager, *Apple* Retail Market...
…This senior level position is responsible for leading and imagining the Apple Retail Team's global event strategy. Delivering an overarching brand story; in-store, Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.