Need to rebuild server. Have questions. MCX vs Profiles

adam9c1 said:

Hello.

Our Mac Mini server died and is being replaced with another (older unit).
Our network admin is unable to find itunes account which has the server app purchase for Mavericks.

He tells me I can install 10.10, purchase 10.10 server app, and download workgroup manager.

I don't expect it to work.

On a side note how can I lock down a client machine so that end user does not remove the profiles?

Click to expand...

Workgroup Manager works OK in 10.10. It's not supported, and I don't know if there's ramifications; as a result, it's imprudent to rely on it. If you're starting from scratch, move to profiles rather than MCX as Apple has deprecated it. If you don't want your users to make changes to profiles, don't give them admin rights. If you use Apple's Profile Manager, you can set the profiles to require a password to be removed but the trust profile can't be password protected. You'd need to disable access to the Profiles preference pane.

adam9c1 said:

How can I disable access to the Profiles pref pane for non admin users?

Click to expand...

There's profile settings for that too.

adam9c1 said:

OK, next

Machine will be part of Microsoft AD.
I need to create OD and import AD objects to it.

Click to expand...

Sounds like you need to read up on documentation.
https://help.apple.com/advancedserveradmin/mac/4.0/