And thanks to the Mac's move to standard PC components, such as Intel processors, USB ports, Ethernet ports, and 802.11 wireless capabilities, such compatibility uses are falling by the wayside. As late as the mid-1990s, Macs included a series of proprietary connections, such as LocalTalk and ADB, and tapped SCSI drive interface technology found only on high-performance PCs. This hardware divide complicated not only IT work but also application development. Most of these hardware issues have been rectified, leaving just a few special keyboard keys to map between Windows and Mac OS when developing cross-platform apps.
Managing Macs in the enterprise
If you concede that your Mac users can run any software they need, either directly or via a VM, you may raise an old IT canard: manageability.
It may surprise you that Mac OS X Server and the separate Apple Remote Desktop software have for a decade facilitated Mac management, providing functionality akin to any Windows-oriented management tool. Developed for Apple's education market, these tools allow you to manage OS updates and app installations and upgrades. With Apple's Automator tool, you can automate much of the management workflows, essentially by creating executable scripts. You can also configure your Macs to boot into a network volume, to cope with drive failure, or to provide visiting employees or guests a nonlocal copy of the OS.
Apple Remote Desktop also allows you to control a user's PC for troubleshooting and technical support, as well as inventory the Macs. And Apple doesn't charge a per-client license for the software, just $500 per copy installed on your administrators' Macs, supporting an unlimited number of clients. (You can also manage Windows and Linux clients using Apple Remote Desktop's VNC support.)
If you don't want an Apple-owned tool, consider FileWave's cross-platform management tools, recommends Publicis' Plavin. Or the cross-platform Client Management Suite from Symantec's Altiris unit, suggests Aquent's Lincoln.
For managing users, access control, and related security policies, Mac OS X Server's Open Directory works with Microsoft's ActiveDirectory, so you can apply ActiveDirectory permissions to and enforce policies on your Mac users and Mac-based file shares from ActiveDirectory. Or you can manage them from OpenDirectory, such as when you have a separate Mac workgroup whose initial policies you want to inherit from ActiveDirectory but then customize for that workgroup in Open Directory. Apple says it supports every one of Microsoft's ActiveDirectory services.
End-user controls in Mac OS X Server are similar to those of Windows management tools: You can restrict users from burning discs, mounting external hard drives, or running unauthorized applications. It also supports laptops' disconnected state, ensuring that settings, configurations, and policies are maintained before network access is granted when a user reconnects.
For organizations not tied to ActiveDirectory, Open Directory also integrates with standard LDAP directory services such as Novell's eDirectory, Sun's Java Enterprise Directory Server, and IBM's Directory Server.