TweetFollow Us on Twitter

An Apple Remote Desktop Critique

Volume Number: 20 (2004)
Issue Number: 12
Column Tag: Programming

Patch Panel

An Apple Remote Desktop Critique

ARD is Much Better in Version 2.1, But Still Needs A Lot of Work

by John Welch

As you can tell from the title, this article is going to be a critique of Apple's remote system management tool, Apple Remote Desktop, or ARD, to the, well, ARD cognoscenti. While it is, especially in version 2.1, a much improved tool over earlier versions, (it's actually useful to more than just K-12 lab Admins now), it still has a few critical areas that need work if it is to move into the next level.

Packaging

ARD needs to be bundled with Mac OS X Server, period. To sell a server that can handle thousands of clients, and then give no way to manage those clients without laying out another few hundred dollars is silly. If I'm buying an Xserve, I need client management tools. It's not like Apple has to license it, and there's no problem with selling it separately, but it needs to be shipped as part of Mac OS X Server. I still see people on mailing lists trying to do things manually, when ARD would be a great help, but after having spent money on Server, there's sometimes a bit of a hurdle getting another P.O. approved because Apple doesn't' think you need client management tools as a part of their server. Compare this to Active Directory, which ships with basic client management as part of Windows Server. Bundling ARD with Mac OS X Server would fill a basic need of network administrators everywhere. (Yes, Apple does ship SSH with Mac OS X, and they do have excellent command line tools. However, the documentation for those tools is a bit...shall we say light.)

Even better: integrate ARD in with Server Admin and Workgroup Manager. This would allow an administrator, when setting up a remote client or user in Workgroup Manager, to easily bring up the client in an ARD window, and test out the various login settings, MCX settings, etc. Integration with Server Admin would allow administrators to better deal with various tools that work better when you can see the screen, or allow administrators who are not yet comfortable with the command line to not have to start swimming in the deep end of the pool, with the drain suction on 'high'.

Another issue for the enterprise is the pricing. At first glance, ARD is one of the cheapest tools out there. However, that's more for if you have a single, or very limited number of administration workstations. In a large network, or an enterprise setup, that's not always going to be the case. If you need multiple administration machines, ARD's price starts to go up in $500US increments. What is needed is perhaps an "Enterprise" version that would allow for unlimited administration workstations in a root domain, so for example, you could have unlimited administration workstations for company.com, and that would include all the subdomains a company might have, like nyc.company.com, etc. This could be based either on DNS, or (more logically), Open Directory domains.

Automation

Another area where ARD suffers is in automation. True, you can now run shell commands directly on clients, but that's a rather manual process. There's no provision for kicking off other commands based on the results, because the ARD itself cannot be scripted, via shell, or AppleScript. Which means that while I can run softwareupdate -l on 500 Macs, I can't have the results of that kick of any automated update process. Automation is critical to administrators, because as your client base goes up, your workload tends to increase by multiples of that increase. A tool that almost lets you automate, or forces you to have manual steps with what little automation it allows you to do is almost a hindrance, not a help.

ARD needs full OSA and shell support, so that automation can happen independently of language provisions. Mac OS X is living in a world of shell, AppleScript, python, Perl, and . While it would be ridiculous to expect Apple to create interfaces for a dozen different languages, full OSA support, (including the ability to directly use shell as an OSA language, something long overdue in OS X), would create the interface so that administrators could use whatever language they feel most productive with, or need to use for their specific workflow.

By implementing OSA support in AppleScript, ARD would become a much better, and more capable tool. If you look at almost any other administration tool on any other platform, they're all scriptable. In fact, there are sites devoted to custom implementations of things like Active Directory tools, Nagios, MRTG, etc., and almost all of them are collections of scripts that someone else decided to donate to a larger community so that their work could benefit others. This kind of community is critical to administrators using those tools, but there's no way to do this kind of thing in ARD.

Directory Service Integration

Mac OS X Server is based on Open Directory, so is Mac OS X. Open Directory is at the heart of everything Apple does for managing machines, yet ARD is resolutely ignorant of Open Directory. Again, yet another way that ARD makes life harder than it should be on its users. There needs to be, as part of integration with Server Admin, a setting that allows you to assign usage privileges to ARD based on user and group settings. So you could create an ARD administrator group or groups, each having different levels of access. This way, creating a new ARD user is a matter of drag and drop in Workgroup Manager. This doesn't require the upcoming ACL structure in Mac OS X 10.4, aka Tiger. Those of course, would make it simpler, because ARD privileges could be a separate ACL setting, which could be applied across a directory.

This is not to say that ARD should require an Open Directory setup to function. That would be just as big of a mistake in the opposite direction. But the need for a client management tool to plug into the client management infrastructure is too obvious to ignore.

Interface and Functional Issues

The rest of any problems with ARD are interface/functional issues. For example, while copying files from the administration workstation to clients is quite simple, copying files from the client to the administration workstation forces you to do a find, find the files you need in the result of the find, click copy, then pick the destination. While this is great if you need to copy one or two files from a couple hundred workstations, that's not how that particular operation works in a large percentage of cases. (Where you see that particular model used the most is in a lab setup. However, Apple networks aren't just for K-12, or Higher Ed labs anymore, and tools like ARD need to reflect this.) For a single file, or folder, ARD should just let you drag it from the client workstation to the administration workstation the same way that you would move files and folders from a network share to your local hard drive. This is also where a scripting interface would be more than a little handy. Being able to use the Unix locate or find tools with ARD would not make administrators cry.

While it's great that Apple is using VNC as the low-level protocol, they haven't done a lot to help ARD users who are not familiar with VNC to more easily get ARD talking to Windows or Linux boxes running VNC. Again, the mailing lists are full of the same kind of question, which shows the difference between merely making a feature available, and making it useful. Spending a little more time to make using the VNC feature easier would pay off quite well.

ARD also needs to talk to other installers. Yes, in a perfect world, (or at least Apple's definition of one) we all use drag and drop disk images, or Apple's Installer. However, in the real world that we all have to work in, we don't. For example, since Installer VISE is cross platform, and Apple's Installer is not, it makes little sense for a company like Adobe, where you have a great deal of similarity between the Mac and Windows versions of their software, to not use an installer technology that saves them time and money by allowing them to use one tool for all their installer needs. Apple needs to recognize this, and either integrate both Allume's Stuffit InstallerMaker, and MindVision's Installer VISE into ARD, or build a plugin architecture into ARD with a proper API so that third parties can extend ARD as needed. (The plugin architecture, while not the best short - term solution, ends up being the better long-term solution for this problem, and every other problem that we haven't even encountered yet. Just ask Adobe and Quark about how beneficial plugins are.) The "just install and image" or "just install, then repackage" arguments are workarounds for NIH, not solutions for the enterprise, (whatever your definition of 'enterprise' is. I worked at MIT, I'll put their network up against any similarly sized corporate network any day of the week. '.edu' does not mean 'tinkertoy'.)

Another issue is security. ARD needs to be able to connect through SSH tunnels as a basic functional part of the client and the administration workstations. SSH ships with Mac OS X, and should be integrated into the connection setup by default. Any kind of administrative connection across a network of any kind needs to be secure by default, and by known, trusted measures. Since Mac OS X and Mac OS X server ship with multiple secure authentication and encryption methods, (SSH, SSL, Kerberos), and Apple uses SSL in its other administration tools, such as Server Admin, there's little reason for not having ARD plug into these methods as well. It's one thing to say "It's secure, trust us" and another thing to say, "It's secure, here are the industry standard methods we use". (Note: Yes, I'm aware that you can manually tunnel ARD or anything else through SSH. That's not the point. It shouldn't require manual or even shell scripted setup. It should be an enabled-by-default checkbox on the install, enabled by default in the client and administration configuration, and enabled by default in the usage. Secure modes of operation need to be the unconscious default, not the manual option.)

Conclussion

Again, ARD has steadily improved throughout its history, and the features in version 2, now 2.1 are enough of an improvement for me to switch over to it from Timbuktu. The integration with VNC was brilliant and obvious, and I'm glad to see that Apple agreed with everyone else on this.

Most of what I base this critique on are things that constitute the "last 20% of excellence". (From the idea that the first 80% of work on a product make it functional and 'good enough', but it's the last 20% that make it "insanely great". Microsoft is the master of the first 80%, but Apple is the master of the last 20%, and that difference shows in almost everything they do.) ARD is so close to being one of the top - notch client management tools on any platform (and on every platform with VNC), and with just a little massaging, it'll get there.


John Welch (jwelch@provar.com) is an IT Staff Member for Kansas City Life Insurance, a Technical Strategist for Provar, (http://www.provar.com/) and the Chief Know-It-All for TackyShirt, (http://www.tackyshirt.com/. He has over fifteen years of experience at making Macs work with other computer systems. John specializes in figuring out ways in which to make the Mac do what nobody thinks it can, showing that the Mac is a superior administrative platform, and teaching others how to use it in interesting, if sometimes frightening ways. He also does things that don't involve computertry on occasion, or at least that's the rumor.

 
AAPL
$119.00
Apple Inc.
+1.40
MSFT
$47.75
Microsoft Corpora
+0.28
GOOG
$540.37
Google Inc.
-0.71

MacTech Search:
Community Search:

Software Updates via MacUpdate

HoudahSpot 3.9.6 - Advanced file search...
HoudahSpot is a powerful file search tool built upon MacOS X Spotlight. Spotlight unleashed Create detailed queries to locate the exact file you need Narrow down searches. Zero in on files Save... Read more
RapidWeaver 6.0.3 - Create template-base...
RapidWeaver is a next-generation Web design application to help you easily create professional-looking Web sites in minutes. No knowledge of complex code is required, RapidWeaver will take care of... Read more
iPhoto Library Manager 4.1.10 - Manage m...
iPhoto Library Manager lets you organize your photos into multiple iPhoto libraries. Separate your high school and college photos from your latest summer vacation pictures. Or keep some photo... Read more
iExplorer 3.5.1.9 - View and transfer al...
iExplorer is an iPhone browser for Mac lets you view the files on your iOS device. By using a drag and drop interface, you can quickly copy files and folders between your Mac and your iPhone or... Read more
MacUpdate Desktop 6.0.3 - Discover and i...
MacUpdate Desktop 6 brings seamless 1-click installs and version updates to your Mac. With a free MacUpdate account and MacUpdate Desktop 6, Mac users can now install almost any Mac app on macupdate.... Read more
SteerMouse 4.2.2 - Powerful third-party...
SteerMouse is an advanced driver for USB and Bluetooth mice. It also supports Apple Mighty Mouse very well. SteerMouse can assign various functions to buttons that Apple's software does not allow,... Read more
iMazing 1.1 - Complete iOS device manage...
iMazing (was DiskAid) is the ultimate iOS device manager with capabilities far beyond what iTunes offers. With iMazing and your iOS device (iPhone, iPad, or iPod), you can: Copy music to and from... Read more
PopChar X 7.0 - Floating window shows av...
PopChar X helps you get the most out of your font collection. With its crystal-clear interface, PopChar X provides a frustration-free way to access any font's special characters. Expanded... Read more
Carbon Copy Cloner 4.0.3 - Easy-to-use b...
Carbon Copy Cloner backups are better than ordinary backups. Suppose the unthinkable happens while you're under deadline to finish a project: your Mac is unresponsive and all you hear is an ominous,... Read more
ForeverSave 2.1.3 - Universal auto-save...
ForeverSave auto-saves all documents you're working on while simultaneously doing backup versioning in the background. Lost data can be quickly restored at any time. Losing data, caused by... Read more

Latest Forum Discussions

See All

Make Way for Fat Chicken, from the Maker...
Make Way for Fat Chicken, from the Makers of Scrap Squad Posted by Jessica Fisher on November 26th, 2014 [ permalink ] Relevant Games has announced they will be releasing their reverse tower defense game, | Read more »
Tripnary Review
Tripnary Review By Jennifer Allen on November 26th, 2014 Our Rating: :: TRAVEL BUCKET LISTiPhone App - Designed for the iPhone, compatible with the iPad Want to create a travel bucket list? Tripnary is a fun way to do exactly that... | Read more »
Ossian Studios’ RPG, The Shadow Sun, is...
Ossian Studios’ RPG, The Shadow Sun, is Now Available for $4.99 Posted by Jessica Fisher on November 26th, 2014 [ permalink ] Universal App - Designed for iPhone and iPad | Read more »
Mmmm, Tasty – Having the Angry Birds for...
The very first Angry Birds debuted on iOS back in 2009. When you sit back and tally up the number of Angry Birds games out there and the impact they’ve had on pop culture as a whole, you just need to ask yourself: “How would the birds taste... | Read more »
Rescue Quest Review
Rescue Quest Review By Jennifer Allen on November 26th, 2014 Our Rating: :: PATH BASED MATCH-3Universal App - Designed for iPhone and iPad Guide a wizard to safety by matching gems. Rescue Quest might not be an entirely original... | Read more »
You Can Play the Final Chapter of Lone W...
You Can Play the Final Chapter of Lone Wolf: Dawn Over V’taag Right Now Posted by Jessica Fisher on November 26th, 2014 [ permalink ] Universal App - Designed for iPhone and iPad | Read more »
Swords of Anima (Games)
Swords of Anima 1.0 Device: iOS Universal Category: Games Price: $2.99, Version: 1.0 (iTunes) Description: A new tactical turn-based RPG experience. Command the Savior Rex Squad in an epic journey of courage and deception. Can you... | Read more »
Audio Defence: Zombie Arena
Audio Defence: Zombie Arena By Lee Hamlet on November 26th, 2014 Our Rating: :: DRAGS ITS FEETUniversal App - Designed for iPhone and iPad From the makers of Papa Sangre comes a defense game that forces players to listen carefully... | Read more »
Tales from the Borderland​s Will be Comi...
Tales from the Borderland​s Will be Coming to iOS by the End of the Year Posted by Jessica Fisher on November 26th, 2014 [ permalink ] Telltale Games has announced | Read more »
Sunburn! Review
Sunburn! Review By Campbell Bird on November 26th, 2014 Our Rating: :: DON'T DIE ALONEUniversal App - Designed for iPhone and iPad Platform through the depths of space to make sure your entire crew dies together in this satisfying... | Read more »

Price Scanner via MacPrices.net

2014 1.4GHz Mac mini on sale for $449, save $...
 B&H Photo has the new 1.4GHz Mac mini on sale for $449.99 including free shipping plus NY tax only. Their price is $50 off MSRP, and it’s the lowest price available for this new model. Adorama... Read more
Early Black Friday pricing on 27-inch 5K iMac...
 B&H Photo continues to offer Black Friday sale prices on the 27″ 3.5GHz 5K iMac, in stock today and on sale for $2299 including free shipping plus NY sales tax only. Their price is $200 off MSRP... Read more
Early Black Friday sale prices on iPad Air 2,...
 MacMall is discounting iPad Air 2s by up to $75 off MSRP as part of their Black Friday sale. Shipping is free: - 16GB iPad Air WiFi: $459 $40 off - 64GB iPad Air WiFi: $559 $40 off - 128GB iPad Air... Read more
Early Black Friday MacBook Air sale prices, $...
 MacMall has posted early Black Friday MacBook Air sale prices. Save $101 on all models for a limited time: - 11″ 1.4GHz/128GB MacBook Air: $798 - 11″ 1.4GHz/256GB MacBook Air: $998 - 13″ 1.4GHz/... Read more
Why iPhone 6 Tablet/Laptop Cannibalization Is...
247wallst.com blogger Douglas A. McIntyre noted last week that according to research posted on the Applovin blog site the iPhone 6 is outselling the iPhone 6 Plus by a wide margin . Hardly a surprise... Read more
Worldwide Tablet Growth Expected to Slow to 7...
The global tablet market is expected to record massive deceleration in 2014 with year-over-year growth slowing to 7.2%, down from 52.5% in 2013, according to a new forecast from International Data... Read more
Touchscreen Glove Company Announces New Produ...
Surrey, United Kingdom based TouchAbility specializes in design and manufacture of a wide variety of products compatible with touchscreen devices including smartphones, tablets and computers. Their... Read more
OtterBox Alpha Glass Screen Protectors for iP...
To complement the bigger, sharper displays on the latest Apple devices, OtterBox has introduced Alpha Glass screen protectors to the iPhone 6 and iPhone 6 Plus. The fortified glass screen protectors... Read more
Early Black Friday Mac Pro sale, 6-Core 3.5GH...
 B&H Photo has the 6-Core 3.5GHz Mac Pro on sale today for $3499 including free shipping plus NY sales tax. Their price is $500 off MSRP, and it’s the lowest price available for this model from... Read more
Early Black Friday sale price: 15-inch 2.2GHz...
 B&H Photo has the 2014 15″ 2.2GHz Retina MacBook Pro on sale today for $1699.99. Shipping is free, and B&H charges NY sales tax only. Their price is $300 off MSRP, equalling Best Buy’s price... Read more

Jobs Board

*Apple* Solutions Consultant (ASC) - Apple (...
**Job Summary** The ASC is an Apple employee who serves as an Apple brand ambassador and influencer in a Reseller's store. The ASC's role is to grow Apple Read more
Senior Event Manager, *Apple* Retail Market...
…This senior level position is responsible for leading and imagining the Apple Retail Team's global event strategy. Delivering an overarching brand story; in-store, Read more
*Apple* Retail - Multiple Positions (US) - A...
Sales Specialist - Retail Customer Service and Sales Transform Apple Store visitors into loyal Apple customers. When customers enter the store, you're also the Read more
*Apple* Solutions Consultant (ASC) - Apple (...
**Job Summary** The ASC is an Apple employee who serves as an Apple brand ambassador and influencer in a Reseller's store. The ASC's role is to grow Apple Read more
*Apple* Solutions Consultant (ASC) - Apple (...
**Job Summary** The ASC is an Apple employee who serves as an Apple brand ambassador and influencer in a Reseller's store. The ASC's role is to grow Apple Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.