TweetFollow Us on Twitter

An Apple Remote Desktop Critique

Volume Number: 20 (2004)
Issue Number: 12
Column Tag: Programming

Patch Panel

An Apple Remote Desktop Critique

ARD is Much Better in Version 2.1, But Still Needs A Lot of Work

by John Welch

As you can tell from the title, this article is going to be a critique of Apple's remote system management tool, Apple Remote Desktop, or ARD, to the, well, ARD cognoscenti. While it is, especially in version 2.1, a much improved tool over earlier versions, (it's actually useful to more than just K-12 lab Admins now), it still has a few critical areas that need work if it is to move into the next level.

Packaging

ARD needs to be bundled with Mac OS X Server, period. To sell a server that can handle thousands of clients, and then give no way to manage those clients without laying out another few hundred dollars is silly. If I'm buying an Xserve, I need client management tools. It's not like Apple has to license it, and there's no problem with selling it separately, but it needs to be shipped as part of Mac OS X Server. I still see people on mailing lists trying to do things manually, when ARD would be a great help, but after having spent money on Server, there's sometimes a bit of a hurdle getting another P.O. approved because Apple doesn't' think you need client management tools as a part of their server. Compare this to Active Directory, which ships with basic client management as part of Windows Server. Bundling ARD with Mac OS X Server would fill a basic need of network administrators everywhere. (Yes, Apple does ship SSH with Mac OS X, and they do have excellent command line tools. However, the documentation for those tools is a bit...shall we say light.)

Even better: integrate ARD in with Server Admin and Workgroup Manager. This would allow an administrator, when setting up a remote client or user in Workgroup Manager, to easily bring up the client in an ARD window, and test out the various login settings, MCX settings, etc. Integration with Server Admin would allow administrators to better deal with various tools that work better when you can see the screen, or allow administrators who are not yet comfortable with the command line to not have to start swimming in the deep end of the pool, with the drain suction on 'high'.

Another issue for the enterprise is the pricing. At first glance, ARD is one of the cheapest tools out there. However, that's more for if you have a single, or very limited number of administration workstations. In a large network, or an enterprise setup, that's not always going to be the case. If you need multiple administration machines, ARD's price starts to go up in $500US increments. What is needed is perhaps an "Enterprise" version that would allow for unlimited administration workstations in a root domain, so for example, you could have unlimited administration workstations for company.com, and that would include all the subdomains a company might have, like nyc.company.com, etc. This could be based either on DNS, or (more logically), Open Directory domains.

Automation

Another area where ARD suffers is in automation. True, you can now run shell commands directly on clients, but that's a rather manual process. There's no provision for kicking off other commands based on the results, because the ARD itself cannot be scripted, via shell, or AppleScript. Which means that while I can run softwareupdate -l on 500 Macs, I can't have the results of that kick of any automated update process. Automation is critical to administrators, because as your client base goes up, your workload tends to increase by multiples of that increase. A tool that almost lets you automate, or forces you to have manual steps with what little automation it allows you to do is almost a hindrance, not a help.

ARD needs full OSA and shell support, so that automation can happen independently of language provisions. Mac OS X is living in a world of shell, AppleScript, python, Perl, and . While it would be ridiculous to expect Apple to create interfaces for a dozen different languages, full OSA support, (including the ability to directly use shell as an OSA language, something long overdue in OS X), would create the interface so that administrators could use whatever language they feel most productive with, or need to use for their specific workflow.

By implementing OSA support in AppleScript, ARD would become a much better, and more capable tool. If you look at almost any other administration tool on any other platform, they're all scriptable. In fact, there are sites devoted to custom implementations of things like Active Directory tools, Nagios, MRTG, etc., and almost all of them are collections of scripts that someone else decided to donate to a larger community so that their work could benefit others. This kind of community is critical to administrators using those tools, but there's no way to do this kind of thing in ARD.

Directory Service Integration

Mac OS X Server is based on Open Directory, so is Mac OS X. Open Directory is at the heart of everything Apple does for managing machines, yet ARD is resolutely ignorant of Open Directory. Again, yet another way that ARD makes life harder than it should be on its users. There needs to be, as part of integration with Server Admin, a setting that allows you to assign usage privileges to ARD based on user and group settings. So you could create an ARD administrator group or groups, each having different levels of access. This way, creating a new ARD user is a matter of drag and drop in Workgroup Manager. This doesn't require the upcoming ACL structure in Mac OS X 10.4, aka Tiger. Those of course, would make it simpler, because ARD privileges could be a separate ACL setting, which could be applied across a directory.

This is not to say that ARD should require an Open Directory setup to function. That would be just as big of a mistake in the opposite direction. But the need for a client management tool to plug into the client management infrastructure is too obvious to ignore.

Interface and Functional Issues

The rest of any problems with ARD are interface/functional issues. For example, while copying files from the administration workstation to clients is quite simple, copying files from the client to the administration workstation forces you to do a find, find the files you need in the result of the find, click copy, then pick the destination. While this is great if you need to copy one or two files from a couple hundred workstations, that's not how that particular operation works in a large percentage of cases. (Where you see that particular model used the most is in a lab setup. However, Apple networks aren't just for K-12, or Higher Ed labs anymore, and tools like ARD need to reflect this.) For a single file, or folder, ARD should just let you drag it from the client workstation to the administration workstation the same way that you would move files and folders from a network share to your local hard drive. This is also where a scripting interface would be more than a little handy. Being able to use the Unix locate or find tools with ARD would not make administrators cry.

While it's great that Apple is using VNC as the low-level protocol, they haven't done a lot to help ARD users who are not familiar with VNC to more easily get ARD talking to Windows or Linux boxes running VNC. Again, the mailing lists are full of the same kind of question, which shows the difference between merely making a feature available, and making it useful. Spending a little more time to make using the VNC feature easier would pay off quite well.

ARD also needs to talk to other installers. Yes, in a perfect world, (or at least Apple's definition of one) we all use drag and drop disk images, or Apple's Installer. However, in the real world that we all have to work in, we don't. For example, since Installer VISE is cross platform, and Apple's Installer is not, it makes little sense for a company like Adobe, where you have a great deal of similarity between the Mac and Windows versions of their software, to not use an installer technology that saves them time and money by allowing them to use one tool for all their installer needs. Apple needs to recognize this, and either integrate both Allume's Stuffit InstallerMaker, and MindVision's Installer VISE into ARD, or build a plugin architecture into ARD with a proper API so that third parties can extend ARD as needed. (The plugin architecture, while not the best short - term solution, ends up being the better long-term solution for this problem, and every other problem that we haven't even encountered yet. Just ask Adobe and Quark about how beneficial plugins are.) The "just install and image" or "just install, then repackage" arguments are workarounds for NIH, not solutions for the enterprise, (whatever your definition of 'enterprise' is. I worked at MIT, I'll put their network up against any similarly sized corporate network any day of the week. '.edu' does not mean 'tinkertoy'.)

Another issue is security. ARD needs to be able to connect through SSH tunnels as a basic functional part of the client and the administration workstations. SSH ships with Mac OS X, and should be integrated into the connection setup by default. Any kind of administrative connection across a network of any kind needs to be secure by default, and by known, trusted measures. Since Mac OS X and Mac OS X server ship with multiple secure authentication and encryption methods, (SSH, SSL, Kerberos), and Apple uses SSL in its other administration tools, such as Server Admin, there's little reason for not having ARD plug into these methods as well. It's one thing to say "It's secure, trust us" and another thing to say, "It's secure, here are the industry standard methods we use". (Note: Yes, I'm aware that you can manually tunnel ARD or anything else through SSH. That's not the point. It shouldn't require manual or even shell scripted setup. It should be an enabled-by-default checkbox on the install, enabled by default in the client and administration configuration, and enabled by default in the usage. Secure modes of operation need to be the unconscious default, not the manual option.)

Conclussion

Again, ARD has steadily improved throughout its history, and the features in version 2, now 2.1 are enough of an improvement for me to switch over to it from Timbuktu. The integration with VNC was brilliant and obvious, and I'm glad to see that Apple agreed with everyone else on this.

Most of what I base this critique on are things that constitute the "last 20% of excellence". (From the idea that the first 80% of work on a product make it functional and 'good enough', but it's the last 20% that make it "insanely great". Microsoft is the master of the first 80%, but Apple is the master of the last 20%, and that difference shows in almost everything they do.) ARD is so close to being one of the top - notch client management tools on any platform (and on every platform with VNC), and with just a little massaging, it'll get there.


John Welch (jwelch@provar.com) is an IT Staff Member for Kansas City Life Insurance, a Technical Strategist for Provar, (http://www.provar.com/) and the Chief Know-It-All for TackyShirt, (http://www.tackyshirt.com/. He has over fifteen years of experience at making Macs work with other computer systems. John specializes in figuring out ways in which to make the Mac do what nobody thinks it can, showing that the Mac is a superior administrative platform, and teaching others how to use it in interesting, if sometimes frightening ways. He also does things that don't involve computertry on occasion, or at least that's the rumor.

 

Community Search:
MacTech Search:

Software Updates via MacUpdate

FileMaker Pro 19.4.2 - Quickly build cus...
FileMaker Pro is the tool you use to create a custom app. You also use FileMaker Pro to access your app on a computer. Start by importing data from a spreadsheet or using a built-in Starter app to... Read more
Adobe Illustrator 26.0.3 - Professional...
You can download Adobe Illustrator for Mac as a part of Creative Cloud for only $20.99/month. Adobe Illustrator for Mac is the vector graphics classics in the design industry. It is a digital... Read more
WhatRoute 2.4.9 - Geographically trace o...
WhatRoute is designed to find the names of all the routers an IP packet passes through on its way from your Mac to a destination host. It also measures the round-trip time from your Mac to the router... Read more
Notion 2.0.20 - A unified workspace for...
Notion is the unified workspace for modern teams. Notion Features: Integration with Slack Documents Wikis Tasks Release notes were unavailable when this listing was updated. Download Now]]> Read more
Monterey Cache Cleaner 17.0.2 - Clear ca...
Monterey Cache Cleaner is an award-winning general-purpose tool for macOS X. MCC makes system maintenance simple with an easy point-and-click interface to many macOS X functions. Novice and expert... Read more
Firetask Pro 4.6.8 - Innovative task man...
Firetask Pro represents the next generation of easy-to-use, project-oriented task management apps. By combining David Allen's powerful Getting Things Done (GTD®) approach with classical task... Read more
Smultron 13.0.4 - Easy-to-use, powerful...
Smultron 13 is the text editor for all of us. Smultron is powerful and confident without being complicated. Its elegance and simplicity helps everyone being creative and to write and edit all sorts... Read more
Box Sync 4.0.8057 - Online synchronizati...
Box Sync gives you a hard-drive in the Cloud for online storage. Note: You must first sign up to use Box. What if the files you need are on your laptop -- but you're on the road with your iPhone? No... Read more
Audio Hijack 3.8.10 - Record and enhance...
Audio Hijack (was Audio Hijack Pro) drastically changes the way you use audio on your computer, giving you the freedom to listen to audio when you want and how you want. Record and enhance any audio... Read more
Direct Mail 6.0.1 - Create and send grea...
Direct Mail is an easy-to-use, fully-featured email marketing app purpose-built for macOS. Create, send, and track great looking email campaigns that get results. Start your newsletter by selecting... Read more

Latest Forum Discussions

See All

SwitchArcade Round-Up: ‘Pokemon Legends:...
Hello gentle readers, and welcome to the SwitchArcade Round-Up for January 28th, 2022. We’ve got a bunch of new releases to look at today, with a few big hitters, a few mid-level diversions, and a healthy supply of compost. Since it’s Friday, we... | Read more »
Phantom Blade: Executioners, S-Game...
S-Game has kicked off its first Closed Beta Test for Phantom Blade: Executioners, inviting a selected few to get first dibs on the upcoming KungFuPunk action RPG on mobile. The CBT officially begins this January 28th, and beta testers will receive... | Read more »
‘Infinite Galaxy’ First Anniversary: Cel...
Cultivating a new generation of valiant commanders across 240 countries worldwide, Infinite Galaxy has quenched players’ thirst to explore the vastness of space – and there are only more intergalactic adventures to embark on from here on out. Camel... | Read more »
War and Order: How to brave the cold in...
War and Order's 6th-anniversary celebrations are underway, and all in good time too - this season not only brings about fabulous festivities, but it also lets players experience the harsh winter in an entirely new way. [Read more] | Read more »
‘Hidden Folks+’ Is This Week’s New Apple...
The original Hidden Folks from Adriaan de Jongh is an excellent hidden objects game featuring hand drawn visuals. It is an absolute joy to play, and it has now released on Apple Arcade in the form of Hidden Folks+ () as an App Store great. If you’... | Read more »
Mini Metro’s First Big Update of 2022 Ad...
Last year saw great updates for Dinosaur Polo Club’s Mini Metro ($3.99) which is also available on Apple Arcade as an App Store Great. | Read more »
SwitchArcade Round-Up: ‘Gunvolt Chronicl...
Hello gentle readers, and welcome to the SwitchArcade Round-Up for January 27th, 2022. In today’s article, we’ve got a whole bunch of new releases to check out. It’s a dangerous one for the wallet today, as there are several interesting games to... | Read more »
SIEGE: Apocalypse lets you engage in mil...
Launching today to the delight of military enthusiasts across the globe, SIEGE: Apocalypse is a new 1v1 military battler from KIXEYE that's set in the early days of the War Commander universe. Players need to collect and upgrade unit cards to build... | Read more »
‘SIEGE: Apocalypse’, KIXEYE’s Military-T...
Military fans across the globe now have more reasons to dive into the War Commander universe as KIXEYE launches SIEGE: Apocalypse on both iOS and Android devices today. The 1v1 military battler pits two players against each other in intense real-... | Read more »
‘Yu-Gi-Oh! Master Duel’ Is Rolling Out N...
Following its launch on PC and all consoles last week, Yu-Gi-Oh! Master Duel has finally released on mobile platforms. Since launch, the game has exploded on multiple platforms with it having over 260k concurrent players on Steam. It has full... | Read more »

Price Scanner via MacPrices.net

Apple has clearance 2020 13″ MacBook Airs ava...
Apple has clearance, Certified Refurbished, 2020 13″ Intel-based MacBook Airs in stock today starting at only $719 and up to $370 off original MSRP. Each MacBook features a new outer case, comes with... Read more
The cheapest iPhones for sale today at Apple...
Apple has restocked Apple Certified Refurbished iPhone 8 models starting at only $359. Each refurbished iPhone comes with a fresh external case, standard Apple 1-year warranty, and free shipping.... Read more
14″ MacBook Pro with Apple M1 Max CPU now in...
Looking for a new 14″ MacBook Pro with an Apple M1 Max CPU? Stock is finally trickling into Apple resellers. B&H has Silver 14″ M1 Max MacBook Pros in stock today for $2899 including free 1-2 day... Read more
14″ MacBook Pros with Apple M1 Pro CPUs are i...
Amazon is reporting stock of 14″ MacBook Pros with M1 Pro CPUs today with a $50 discount. Shipping is free, and delivery is available by February 1st for most configurations. Be sure to make your... Read more
Apple has restocked 13″ M1 MacBook Pros for $...
Apple has restocked a full line of 13″ M1 MacBook Pros available Certified Refurbished, starting at only $1099 and up to $230 off original MSRP. These are the cheapest M1 MacBook Pros for sale today... Read more
Apple’s AirPods Max headphones are on sale fo...
Amazon has Silver, Blue, and Space Gray Apple AirPods Max headphones on sale today for $100 off MSRP. Shipping is free, and all models are in stock today. Their price is the lowest currently... Read more
Open a new line of service at Verizon and get...
Verizon is giving away 64GB Apple iPhone 12 minis or your choice of an iPhone 11 to customers who choose one of these phones and open a new line of service. Offer is available online only, and no... Read more
Open-box 13″ M1 MacBook Airs now available st...
QuickShip Electronics has open-box return 13″ M1 MacBook Airs in stock and on sale for $200-$400 off MSRP on their eBay store right now with free express delivery. According to QuickShip, “The item... Read more
Verizon’s 2022 iPad promo: $100-$310 off any...
Verizon has cellular-capable iPads on sale for $100-$310 off MSRP when purchased with an Unlimited service plan. Sale price is applied to your account monthly over a 24 or 30 month period, depending... Read more
Sunday Sale: Apple AirPods are on sale for up...
Amazon has Apple AirPods on sale for $10-$100 off MSRP today, depending on the model. All are in stock today with free delivery: – AirPods Max headphones (Blue): $449 $100 off MSRP – AirPods Max... Read more

Jobs Board

Registered Nurse (RN) Employee Health PSJH -...
…is calling for a Registered Nurse (RN) Employee Health PSJH to our location in Apple Valley, CA.** We are seeking a Registered Nurse (RN) Employee Health PSJH to be Read more
Systems Administrator - Pearson (United State...
…and troubleshoot Windows operating systems (workstation and server), laptop computers, Apple iPads, Chromebooks and printers** + **Administer and troubleshoot all Read more
IT Assistant Level 1- IT Desktop Support Anal...
…providing tier-1 or better IT help desk support in a large Windows and Apple environment * Experience using IT Service Desk Management Software * Knowledge of IT Read more
Human Resources Business Partner PSJH - Provi...
…**is calling a** **Human Resources Business Partner, PSJH** **to our location in Apple Valley, CA.** **Applicants that meet qualifications will receive a text with Read more
Manager Community Health Investment Programs...
…is calling a Manager Community Health Investment Programs PSJH to our location in Apple Valley, CA.** **Qualified candidates will be invited to do a self-paced video Read more
All contents are Copyright 1984-2011 by Xplain Corporation. All rights reserved. Theme designed by Icreon.