67
Mac Integration Basics 10.7 Adding a Mac to a Windows or other Standards-based Network

Mac Integration Basics 107

Embed Size (px)

DESCRIPTION

Basic Information on integrating Macintosh Computers into an Enterprise environment

Citation preview

  • Mac Integration Basics 10.7 Adding a Mac to a Windows or other Standards-based Network

  • COPYRIGHT

    Apple Inc. 2011 Apple Inc. All rights reserved.

    Apple, the Apple logo, iCal, iPhone, iPhoto, iPod, iTunes, Keynote, Mac, Macintosh, Mac OS, Numbers, Pages, Safari, and Spotlight are trademarks of Apple Inc., registered in the U.S. and other countries.

    Adobe and PostScript are trademarks or registered trademarks of Adobe Systems Incorporated in the U.S. and/or other countries.

    Bluetooth is a registered trademark owned by Bluetooth SIG, Inc.

    UNIX is a registered trademark of The Open Group in the U.S. and other countries.

    Other company and product names mentioned herein are trademarks of their respective companies. Mention of third-party products is for informational purposes only and constitutes neither an endorsement nor a recommendation. Apple assumes no responsibility with regard to the performance or use of these products.

    Mention of third-party products is for informational purposes only and constitutes neither an endorsement nor a recommendation. Apple assumes no responsibility with regard to the performance or use of these products. All understandings, agreements, or warranties, if any, take place directly between the vendors and the prospective users. Every effort has been made to ensure that the information in this manual is accurate. Apple is not responsible for printing or clerical errors.

    Every effort has been made to ensure that the information in this manual is accurate. Apple is not responsible for printing or clerical errors.

    Because Apple periodically releases new versions and updates to its software, images shown in this book may be different from what you see on your screen.

    08-26-2011

  • Contents

    Introduction 5Overview 5Prerequisite Knowledge 5

    Network Accounts 6Configuring a Mac to Connect to a Network Account Server 6Using Network Accounts 11Summary 12For Additional Information 12

    File Sharing 13Connecting to File Servers 13Personal File Sharing 15Summary 17For Additional Information 17

    Email, Calendars, and Contacts 18Email 18

    Connecting to an Exchange ServerEmail with POP and IMAP Servers

    Contacts 21Calendars 23Summary 26For Additional Information 26

    Security 27User Account Security 27

    Choosing a PasswordLocking the Computer ScreenDisabling Automatic Login

    System Security 30FileVault 2Firmware PasswordAntivirus Protection

    Network Security 35OSX Firewall

  • Virtual Private NetworkSummary 40For Additional Information 40

    Printing from OSX Computers 41Connecting to a USB Printer 41Printing to a Network Printer 42Working with PPD files 43Summary 44For Additional Information 44

    Instant Messaging 45Configuring iChat 46

    me.com, Mac.com, and AIM AccountsOther Instant Messaging Services

    Summary 51

    Data Management and Backup 52Migrating Data from Windows to a Mac 52

    Transfer your Information from a PC with Migration AssistantCopying Files to External StorageMigrating Files Via Email

    Backing Up Data 54Backing Up Data with Time MachineAlternate Backup Methods

    Summary 57

    Cross-platform Compatibility 58Cross-platform Compatibility 59

    Cross-platform ApplicationsCross-platform File Types

    Running Windows on a Mac 59Boot CampVirtualization

    Summary 65For Additional Information 65

    Additional Resources 66Mac Integration Basics Exam 66OSX Training & Certification 66

    OSX CoursesOSX Certifications

    Books 67Support 67

  • Introduction

    OverviewThis guide is for individuals bringing a Mac computer into a small business environment that is predominantly Windows-based. Windows Small Business Server is most likely the server being used. The guide is also for users replacing a Windows computer with a Mac, and for system administrators supporting the above users.

    In this guide youll learn all the ways you can integrate a Mac within your organizations network environment, including how to configure your Mac to work with Active Directory, and how to take advantage of network services, file sharing, printing, instant messaging, emailing, calendars and contacts.

    Youll also learn about security at the user, local network, and remote networking levels. Youll learn about data management, both migrating your data from a Windows computer as well as backing up your important data. Finally youll learn how to run Windows programs directly on your Mac, giving you total compatibility and interoperability with colleagues using Windows.

    Prerequisite KnowledgeThis material assumes you have a basic understanding of OSX skills and terminology. If youre new to the Mac, you should review one of two online Apple Support resources that provide an introduction to using the Mac:

    Switch 101Designed for a PC user who has just switched to the Mac and wants to find out how to adapt old working habits to the Mac. Switch 101 is located online at http://www.apple.com/support/switch101/.

    Mac 101Written for people who are new to computers or simply need a refresher course on how to get the most out of a Mac. Mac 101 is located online at http://www.apple.com/support/mac101/.

    5

    1

  • Network Accounts

    Microsoft Small Business Server and Windows Server use Active Directory to provide accounts, authentication and shared services for network users. Open Directory is another directory server implementation that enables the use of LDAP directory services. Whatever directory service protocol your organization uses, Mac users can effortlessly join existing networks and adhere to enterprise policies for strong authentication and password-protected access to network resources. Adding a Mac to a network with directory services is a simple process thanks to the network account support built into OSXLion.

    Configuring a Mac to Connect to a Network Account ServerTo allow your Mac to use a network account, you must first configure it to connect to a directory server. This configuration process is known as binding.

    Binding is accomplished in the Users & Groups pane of System Preferences. Youll need to authenticate as an administrator user to initiate the process. In the next steps youll learn how to bind to an Active Directory server and an Open Directory/LDAP server.

    Bind to an Active Directory server:

    Before you bind a Mac to an Active Directory server, youll need the following pieces of information from the server administrator:

    The address of the Active Directory Domain. An administrator user name. An administrator password.

    Note:Your server administrator may also specify the ID your computer should use.

    6

    2

  • 1. Choose Apple menu > System Preferences.2. Click Users & Groups.

    3. Click Login Options.

    4. If the lock icon is locked, unlock it by clicking it and entering the name and password of an administrator account.

    7

  • 5. Click the Join button.If youve previously joined a directory server, click the Edit button instead of the Join button. In the dialog that appears, click the Add (+) button beneath the list of previously joined servers.

    6. Enter the Active Directory address provided by your server administrator.The dialog window will expand to display the Active Directory Settings fields.

    7. Enter the Active Directory user name and password provided by your server administrator.

    8

  • 8. Optionally edit the ID you want Active Directory to use for your server.The Client Computer ID is preset to the name of the computer. (This is the same name the Mac uses in the Sharing preferences.) You can change this to conform to your organizations established scheme for naming computers in the Active Directory domain. If youre not sure, consult the server administrator.

    9. Click OK.This creates a record for your Mac in the Active Directory domain.

    Bind to an Open Directory/LDAP server:

    When adding an Open Directory server, youll need the following pieces of information from the server administrator:

    the server name or IP address. whether the server requires the secure sockets layer (SSL) protocol.

    1. Open System Preferences by either clicking the System Preferences icon in the Dock, or choosing System Preferences from the Apple menu.

    2. Click Users & Groups.

    9

  • 3. Click Login Options.

    4. If the lock icon is locked, unlock it by clicking it and entering the name and password of an administrator account.

    5. Click the Join button.If youve previously joined a directory server, click the Edit button instead of the Join button. In the dialog that appears, click the Add (+) button beneath the list of previously joined servers.

    6. You can choose a server from the pop-up menu or manually enter the servers domain name (or IP address).

    10

  • 7. Click OK.OSX will connect to the directory server. Youll be notified if the directory server doesnt provide a secure connection via SSL and given the option to continue or cancel the connection to the server.

    8. Click Done to return to the Users & Groups pane.Youve bound your Mac to an LDAP server.

    Using Network AccountsNow that youve configured your Mac to connect to a directory server, you can log into it using your network user account.

    Before you can log in, youll need to get a network account user name and password from the server administrator. For Active Directory accounts, the user name can be in one of three formats:

    shortname

    [email protected]

    DOMAIN\shortname

    Log in using a network account:1. If youre currently logged in on your Mac, log out by choosing Log Out from the Apple

    menu.

    OSX will log out and a login window will list all the local user accounts, followed by Other.

    2. Click Other and enter the network account user name and password provided by your server administrator.

    3. Press Return or click the Log In (the right arrow) button.Youre now logged into your Mac using the account provided by the directory server. Your Mac system is fully integrated into the network.

    11

  • SummaryIn this chapter youve learned the steps for setting up a Mac to connect to a directory server. Based on what youve learned, you should be able to perform these tasks:

    Obtain the information from the directory server administrator necessary to bind a Mac to a directory server.

    Bind a Mac to a directory server. Log into a Mac with a network user account.

    After completing these steps, your Mac can take advantage of user authentication and network resources provided by your organizations directory server.OSX includes built-in support that makes this process simple and easy.

    For Additional Information The following resource provides more information about configuring OS X to connect to directory servers:

    Network Services in OS X Lion Support Essentials, Peachpit Press, 2011

    12

  • File Sharing

    Organizations constantly share files and resources across networked computers. OSXLion supports a wide variety of the most popular file server protocols. In this chapter youll learn how to connect your Mac to file servers. Youll also learn how to configure Personal File sharing to let other network users access files on your Mac.

    Connecting to File ServersYou can connect to Mac and Windows computers that have file sharing turned on, and to file servers that are using the AFP, SMB/CIFS, NFS, WebDAV, and FTP protocols. To access shared files stored on personal computers and file servers on your network, you can either browse for the computer by name in a Finder window, or enter its IP address directly in the Connect to Server dialog.

    Connect to a computer or server by browsing:1. In the Finder, choose Go > Connect to Server.

    2. Click Browse.You can also click the disclosure triangle next to Shared in a Finder window sidebar.The computers on your network that have sharing turned on are listed in a Finder window.

    3. Search for the computer or servers name.You may also need to know the network area or workgroup the computer is located in.

    13

    3

  • 4. When you locate the desired shared computer or server, select it and click Connect As.5. If necessary, enter your user name and password and select volumes or shared folders

    on the server.

    Note:To make it easier to connect to the server in the future, select Remember this password in my keychain to add your user name and password for the computer to your keychain. This adds your user name and password for the file server to your keychain on your Mac. Next time you want to connect to this file server, your authorization information will be remembered, and youll gain access automatically.

    Connect directly to Windows file servers:1. In the Finder, choose Go > Connect to Server.2. Type the network address for the computer or server in the Server Address field using

    one of these formats:

    smb://DNSname/sharename

    smb://IPaddress/sharename

    where DNSname is the domain name of the server, IPaddress is the servers IP address, and sharename is the name of the shared volume to be mounted.

    Note:SMB stands for the Server Message Block protocol, used mainly by Windows computers to provide shared network access. SMB is also known as the Common Internet File System or CIFS.

    If you have connected to the file server recently, you can also choose it from the Recent Servers (the clock) pop-up menu.

    To add a computer or server to your Favorite Servers list, click the Add (+) button after entering the address.

    If you have added a server to the Favorite Servers list, you can double-click the servers address in the list.

    3. Click Connect.4. Choose to Connect as a Registered User and enter the user name and password you

    were provided by the server administrator.

    Youve now used your Mac to access files stored on network file servers. You may also want to set up your Mac to allow other network users to access your files with Personal File sharing. The next section will show you how to enable Personal File sharing on your Mac.

    14

  • Personal File SharingTo allow other network users to connect to your Mac, you have to turn on file sharing in System Preferences. You may want to create a special file-sharing account on your Mac, to maintain the security of your unshared files.

    Youll need to give these pieces of information to the users you want to authorize to access your shared files:

    The IP or Bonjour (the OS X auto network discovery feature) address of your Mac The user account name for the account on your Mac that has file sharing turned on The user account password for the file-sharing account on your Mac

    Note:If you want to use a user account that existed before you installed the latest version of OSX, you may need to reset the password for the account in Users & Groups preferences.

    Before you set up sharing you should choose which folders to share with network users and which permissions theyll have. By default, the Mac administrator account has full read and write access while all others have only read access.

    Select which folders to share:1. Choose Apple menu > System Preferences, and then click Sharing.2. Select File Sharing in the list.3. Click Add (+) at the bottom of the Shared Folders list, and then locate the folder, select

    it, and click Add.

    By default, the Public folder of each user with an account on your computer is shared. To keep a folder from being shared, select it in the Shared Folders list and click Delete (-).

    4. To give only specific users access to a folder, select the folder in the Shared Folders list and click Add (+) at the bottom of the Users list. Select a category of user, and then select the user and click Select.

    To select a user from the accounts youve set up in Users & Groups preferences, select Users & Groups.

    To select a user from users on your network, select Network Users. To select a user in your personal address book, select Address Book. To create a new account that will only be used for sharing, click New Person, enter a

    name and password, and click Create Account.5. Select the user in the Users list, and then click the triangles next to the user name and

    choose the level of access the user should have to the selected folder:

    No Access: The user cant see or copy files from the folder. Read & Write: The user can see and copy files to and from the folder. Read Only: The user can view the contents of the folder but cant copy files to it. Write Only (Drop Box): The user can copy files to the folder but cant view its

    contents.

    15

  • 6. Give authorized users your computers IP or Bonjour address and the user name and password they should use to share files with your computer. Your computers Bonjour address is visible in the Sharing pane.

    Now that youve granted users access and configured your folder permissions, you set the protocol your computer uses to share files. You can share files using Apple Filing Protocol (AFP) or Server Message Block (SMB) protocol. OSX uses AFP to share files with other Mac computers and SMB to share files with Windows users. In the following section youll learn how to enable SMB sharing on your Mac, then youll learn how to enable AFP sharing.

    Enable Personal File sharing for Windows users:1. Choose Apple menu > System Preferences, and then click Sharing.2. Click File Sharing to select it, and then click Options.3. Select Share files and folders using SMB or Share files and folders using AFP. You can

    select more than one.

    If youre sharing files with Windows users, make sure to select the SMB option, select the On checkbox next to the name of each account that will share files from a Windows computer, and enter the password for that account.

    To help keep your computer secure, you may want to create a special account for Windows users in Users & Groups preferences.

    Note: Because the passwords for some Windows users may be stored less securely, its a good idea to disable Windows users accounts when theyre not in use. Deselect the On checkbox next to an account to disable the account. Be sure to disable the account before you turn off file sharing on your computer. Otherwise, the password is still active and stored in a less secure manner.

    4. Click Done.Youve enabled Personal File sharing on your Mac. Authorized network users can now access the files and volumes you chose to share.

    16

  • SummaryIn this chapter youve learned the steps for sharing files to and from a Mac with network file servers. Based on what youve learned, you should be able to perform these tasks:

    Access shared files on a network using a Mac via browsing and direct connection. Set up folder and user permissions for Personal File sharing. Enable Personal File sharing over SMB and AFP on a Mac. Provide network users with a user name and password allowing them to access files

    that are on your Mac.

    For Additional Information The following resource provides more information about configuring OS X to connect to file servers and share files:

    Network Services in OS X Lion Support Essentials, Peachpit Press, 2011

    17

  • Email, Calendars, and Contacts

    OSXLion has out-of-the-box support for email, contacts, and calendar using standards-based servers including Microsoft Exchange Server, POP, SMTP and more. OSXLion lets you easily connect directly to shared services such as email, calendars, and Global Address Lists. Youll use Mail, iCal, and Address Book and take advantage of powerful Mac features including Spotlight, Quick Look, data detectors, and more.

    In this chapter, youll learn how to configure the OSX Mail application to send and receive email via common server types. Then youll learn how to configure Address Book to access shared contacts. Finally, youll learn how to configure iCal to access shared calendar services.

    Note:Exchange support requires Microsoft Exchange Server 2007 Service Pack 1 Update Rollup 4 or Exchange Server 2010.

    EmailIn this chapter youll learn how to set up OSX Mail to connect directly to an Exchange server, then youll learn how to connect to common non-Windows mail servers.

    Connecting to an Exchange ServerTo connect a Mac to an Exchange server, youll need the following pieces of information from the server administrator:

    The fully qualified domain name for the organizations Client Access Server (CAS), typically expressed in the format: exchange01.example.com.

    The Exchange user name, which is generated by the administrator for each individual user.

    The Exchange password, which is also generated for each user.

    Once you have the required information, you can either manually configure your Mac to use Exchange, or configure the Mac using the Exchange Autodiscover service, if its enabled.

    18

    4

  • Connect to an Exchange server with Autodiscover enabled:

    The easiest way to set up Mail, Address Book, and iCal to access Exchange is the Exchange Autodiscover service. If this feature is enabled on the Exchange Server, simply open the Add Account pane in Mail on your Mac and enter your Exchange email address and password.

    Mail uses the Autodiscover service in Exchange to obtain the relevant information and you can start using Exchange services immediately. If Autodiscover isnt enabled on the Exchange Server, follow the steps below to manually configure your account.

    Manually configure Mail for an Exchange account:1. In Mail, Choose File > Add Account or click Add (+) in the Accounts pane of Mail

    preferences.2. Enter information about the user.

    Mail searches for the information it needs to finish setting up the account. If it cant find the information, continue to the next step.

    3. Choose Exchange from the Account Type pop-up menu.4. Enter a description for the account (for example, Work or Exchange).5. Enter the fully qualified domain name for the organizations Exchange Client Access

    Server.6. Make sure the Address Book and iCal checkboxes are selected to automatically set up

    those applications.

    If you were not able to configure Address Book and iCal automatically during this process, see the upcoming sections for additional manual configuration steps.

    19

  • 7. Click Continue.Note:To access an Exchange server with a Mac from outside the organizations network, confirm with the server administrator that port 443 is open and Exchange Web Services (EWS) is enabled.

    Youve now configured Mail for use with Exchange. You can confirm this by checking your email and sending email to a colleague from your Exchange account.

    Email with POP and IMAP ServersIf your organization uses a non-Windows server to administer email services you can easily configure Mail for access. Common mail server protocols include Post Office Protocol (POP) and Internet Message Access Protocol (IMAP), which allow client computers to access messages on the mail server, and Simple Mail Transfer Protocol (SMTP) for sending messages. OSXLion includes the Automatically set up account option. This option configures email settings for many popular email service providers.

    Note:If this option is not present, it means the email service provider you entered is not recognized. Make sure the domain (the part after the @ symbol) is spelled correctly. If the domain is spelled correctly, youll need to manually configure the account in Mail.

    Configure Mail to automatically connect to common email services:1. Open Mail.2. If the Welcome to Mail assistant does not appear, choose Add Account from the File

    menu.3. Fill in the full name, email address, and password you received from your email service

    provider. 4. Select Automatically set up account.5. Click Create to complete the process.

    Manually configure Mail to connect to common email services:

    Before proceeding with manual email setup, youll need to obtain your user name, password, account type, security settings, and incoming and outgoing mail servers from your email service provider.

    1. Open Mail.2. If the Welcome to Mail assistant does not appear, choose File > Add Account.3. Fill in the full name, email address, and password from your email service provider.4. Deselect Automatically set up account if its enabled. Click Continue.5. Choose the proper Account Type. This is the protocol the email service uses such as

    IMAP, POP, etc.6. Give the account a useful description.7. Enter your Incoming Mail Server, User Name and Password. Click Continue.8. If prompted, enter your Incoming Mail Security settings. Click Continue.9. For Outgoing Mail Server, choose a useful description.

    20

  • 10. Enter the Outgoing Mail Server details.11. If necessary, select Use Authentication and enter your user name and password. Click

    Continue.12. If prompted, enter your Outgoing Mail Security settings. Click Continue.13. Verify your settings in the Account Summary. Click Take account online.14. Click Create to complete the process.

    Congratulations, youve configured Mail for use with a variety of common mail server protocols. You can confirm this by checking your email as well as sending a test email to yourself or a colleague.

    ContactsAddress Book contacts can be automatically set up for use with Exchange by following the Mail configuration steps described in the Email section, but you might need to configure them manually. For example, if youre not using OSX Mail but you still want to synchronize your contacts with Exchange, youll need to do it manually.

    Add an Exchange account in Address Book:1. Open Address Book.2. Choose Address Book > Preferences, and then click Accounts.

    3. Click Add (+) in the lower-left corner of the Accounts pane.

    21

  • 4. Choose Exchange from the Account Type pop-up menu and enter the Exchange user name and password provided by the server administrator.

    5. When youre done, click Create.The Address Book account assistant searches directory services for an account that matches the information you provided, and uses settings from the found account to create your new Address Book account.For some accounts, if Address Book cant complete the process, it displays the Account Settings pane, where you can enter more detailed information. To display the Account Settings pane yourself, hold down the Option key while you move the pointer over the Create button, and then click it when the label changes to Continue.

    Youve configured Address Book for use with Exchange. Having access to your pre-existing contacts can greatly increase your productivity and ease your transition to the Mac.

    22

  • CalendarsiCal on your Mac includes the ability to view real-time availability of co-workers and conference rooms in the Global Address List, and to autocomplete their names when you invite them to meetings. You can also receive and act on meeting invitations in email, and you can send invitations to people outside your organization using email. In this section youll learn how to set up an Exchange account in iCal. Then youll learn how to configure iCal for use with other calendar services including Google and Yahoo.

    Add an Exchange account in iCal:

    iCal can be automatically set up for use with Exchange as part of the Mail configuration steps described in the Email section, but you might need to set it up manually.

    1. Open iCal.2. Choose iCal > Preferences and click Accounts.

    3. To add a new account, click the Add (+) button in the lower-left corner.

    23

  • 4. Choose Exchange from the Account Type pop-up menu and enter the Exchange user name and password provided by the server administrator.

    5. Click Create.iCal finds any calendar accounts associated with the email address you provided.

    Configure iCal for Google Calendar:

    To use iCal with Google Calendar, first youll need to sign up for a free Google account. After youve established a Google account and created a calendar, confirm that sharing is enabled in the online calendar settings before proceeding to the following steps.

    1. Open iCal.2. Choose iCal > Preferences and click Accounts.3. To add a new account, click the Add (+) button in the lower-left corner.4. Choose Google for the account type and enter the email address and password you

    use to access your Google account.

    24

  • 5. Click Create.iCal finds any calendar accounts associated with the email address you provided.

    Configure iCal for Yahoo! Calendar:

    To use iCal with Yahoo Calendar, first youll need to sign up for a free Yahoo! account. After youve established a Yahoo! account and created a calendar, confirm that sharing is enabled in the online calendar settings before proceeding to the following steps.

    1. Open iCal.2. Choose iCal > Preferences and click Accounts.3. To add a new account, click the Add (+) button in the lower-left corner.4. Choose Yahoo! for the account type and enter the email address and password you

    use to access your Yahoo! account.

    5. Click Create.iCal finds any calendar accounts associated with the email address you provided.

    Congratulations, youve configured iCal for use with a variety of standards-based calendar services. Test out the configuration by selecting Calendar > Refresh All, which initiates a download of the latest versions of all your shared calendars.

    25

  • SummaryIn this chapter you learned how to configure a Mac to access server-based mail, calendar, and address book services. Based on what youve learned, you should be able to perform the following tasks:

    Configure the OSX Mail application to send and receive email using various types of mail servers.

    Configure the Address Book application to access shared contacts on an Exchange server.

    Configure the iCal application to access shared calendar services including Exchange, Google Calendar and Yahoo! Calendar.

    For Additional Information The following resource provides more information about configuring OS X to connect to a network server to access mail, calendar, and address book services:

    Network Services in OS X Lion Support Essentials, Peachpit Press, 2011

    26

  • Security

    OSXLion offers strong, easy-to-use tools for all key aspects of network and computer security. Its important to maintain security at every level by protecting your user data, protecting your Mac system, and securing your network. Security is a complex topic and this is not a comprehensive guide, so please consult the additional resources at the end of the section for more information.

    In this chapter youll secure your user data by choosing a strong password, configuring your home folder permissions, and enabling FileVault 2. Next, youll protect your Mac system by setting a firmware password and enabling antivirus software. Finally, youll enable network security by configuring the OSX firewall and VPN access services.

    User Account SecurityChoosing a PasswordIts important for everyone to create strong passwords in a corporate work environment. A weak password can be compromised, allowing access to your Mac, your files, and your personal email account, as well as sensitive company data. The password you choose is very important for your computers security, as it will be used to install software, set up accounts, access the keychain utility, and log onto your computer.

    The most secure passwords are created from a combination of random uppercase letters, lowercase letters, special characters (such as $@!#) and numbers. For example, L1quid$m0ke is a good password because its a long, easily remembered, uncommon phrase with letters replaced by special characters and numbers.

    Lion includes Password Assistant, an application that analyzes the complexity of a password or generates a complex password for you. You can specify the length and type of password youd like it to generate.

    27

    5

  • You can choose from the following methods for setting a password:

    ManualYou enter a password, and then Password Assistant reports the robustness of that password to you on a Quality bar. If the password is weak, Password Assistant offers tips for increasing the quality of the password.

    MemorableYou adjust the passwords Length setting, and then Password Assistant generates a list of memorable passwords in the Suggestion menu.

    Letters & NumbersYou adjust the passwords Length setting, and then Password Assistant generates a list of passwords with a combination of letters and numbers.

    Numbers OnlyYou adjust the passwords Length setting, and then Password Assistant generates a list of passwords containing only numbers.

    RandomYou adjust the passwords Length setting, and then Password Assistant generates a list of passwords containing random characters.

    FIPS-181 compliantYou adjust the passwords Length, and then Password Assistant generates a password that is FIPS-181 compliant (which includes mixed uppercase and lowercase, punctuation, and numbers). For example, you can create a randomly-generated password or a FIPS-181 compliant password that is 12 characters long.

    Use Password Assistant to create a password:1. Choose Apple menu > System Preferences, click Users & Groups, and then click the

    Change Password button.

    2. Click the Key button ( ) to the right of the New password field. This opens the Password Assistant.

    3. From the Type pop-up menu, choose Memorable, Manual, or the type of password that most closely aligns with your companys security standards.

    You can also choose the number of characters youd like for an automatically generated password by moving the Length slider to the left or right.

    28

  • 4. Click the the Change Password button.

    By setting a strong password youve protected your personal data from unauthorized access.

    Locking the Computer ScreenIf you want to stay logged in to your computer while you are away from it, but need to prevent others from using it, you can lock the screen. When you return to the computer, type your login name and password to continue working.

    Require authentication to wake your computer:1. Choose Apple menu > System Preferences, click Security & Privacy, and then click

    General.2. Select Require password... after sleep or screen saver begins.

    You can adjust the length of the delay before a password is required in the pop-up menu.

    Locking the screen doesnt prevent other users from turning off the computer and restarting it, and then logging in to their own account. If you think this could happen, be sure to save your work before you leave your computer.

    To lock your screen quickly when fast user switching is enabled, choose Login Window from the menu with your user name at the top-right of the screen. Your applications will remain open and undisturbed, but your computer will be locked.

    29

  • Disabling Automatic LoginIf your computer starts up without displaying the login window, its set up to log in to a specified user account automatically. When a computer is shared by multiple users, its best to set up a unique account for each user and disable automatic login. Using separate accounts protects each users information and makes the computer more secure.

    Important:Because automatic login allows anyone to access your Mac simply by restarting it, disable automatic login to keep your computer secure. If automatic login is enabled, make sure the computer does not automatically log in to an account with administrator privileges.

    Turn off automatic login:1. Choose Apple menu > System Preferences and click Users & Groups.2. Click the lock icon to unlock it, and then type an administrator name and password.3. Click Login Options.4. Choose Off from the Automatic login pop-up menu.

    The next time you start up your computer, the login window will appear and a user name and password will be required to log in.

    System SecuritySecurity goes beyond setting passwords and encrypting data. OSX supports additional methods to secure the system itself. FileVault 2 encrypts the contents of a volume. Setting a firmware password helps prevent circumvention of the OS-level security through an unauthorized boot device. Antivirus protection helps insure that any viruses that might come from other operating systems on the network wont threaten your data.

    FileVault 2You can use FileVault 2 to protect the files on your disk from being seen or copied. FileVault 2 disk encryption encodes the information stored on your disk so it cant be read unless the login password is entered.

    If you store sensitive information on your computer, you should consider using FileVault disk encryption. For example, if you carry all your companys financial data on your portable computer, losing it could allow someone to access sensitive data that might hurt your business. If youre logged out of your account when your computer is lost but the data is encrypted, your information is protected.

    The disk encryption in OS X uses the government-approved encryption standard, the Advanced Encryption Standard with 128-bit keys (AES-128).

    When you turn on FileVault 2, youre given a recovery key. An administrator can use the recovery key as a safety measure to unlock the disk if the administrators login password is forgotten.

    30

  • To ensure security, when you turn on FileVault 2 other security features are also turned on. For example, a password will be required to log in, after waking from sleep, and after leaving the screen saver. After the initial startup only users enabled in FileVault will be able to log in; other users will need an administrator to log in first.

    WARNING: Dont forget your administrator password. If you turn on disk encryption and then forget your login password, your Apple ID, and your recovery key, you wont be able to log in to your account, and your files and settings are lost forever.

    Set up FileVault 2:1. Choose Apple menu > System Preferences, click Security & Privacy, and then click

    FileVault.2. Click the lock icon to unlock the pane, and then type an administrator name and

    password.

    3. Click Turn On FileVault.

    31

  • 4. If the computer has multiple accounts, a list of accounts appears.

    You can enable a user to allow them to log in after the computer starts up. If they are not enabled, an administrator will need to log in first, before the user can log into their account.For each of the users you want to enable, click Enable User next to that users name, and enter (or have the user enter) the users login password, and then click OK.

    5. A dialog appears with a recovery key that you can use to unlock the disk if you forget your password. If the recovery key is hidden, click the triangle next to Show Recovery Key.

    6. Copy the recovery key and store it in a safe place, and then click Continue.

    32

  • 7. Choose whether you want the added safeguard of storing the recovery key with Apple. If the recovery key is stored with Apple, you can retrieve it by contacting Apple Support and answering three selected questions.

    If you want to store the recovery key with Apple, click Store the recovery key with Apple, and then choose and answer three questions. Apple Support will ask these questions when you contact them. The answers are required to unlock the recovery key, which is encoded, and cannot be read. Be sure they are answers you can easily remember.

    If you dont want to store the recovery key with Apple, click Do not store the recovery key with Apple.

    8. Click Continue.9. Click Restart.

    After you restart, encryption begins. It may take some time to encrypt your disk, depending on how much information you have on the disk. However you can use the computer as usual while the disk is being encrypted.

    Firmware PasswordYou can configure a firmware password to enable low-level hardware protection for your Mac. A firmware password helps prevent unauthorized users from booting your Mac from an external hard disk, optical disc, or USB key drive.

    Set a firmware password:1. Restart the computer and hold down the Option key.2. When presented with the list of bootable volumes, double-click the Recovery HD hard

    drive.3. When the Mac OS X Utilities window appears, choose Utilities > Firmware Password

    Utility.4. Click Turn On Firmware Password.5. Enter a password in the Password and Verify fields.6. Click Set Password. 7. Click Quit Firmware Password Utility.

    You can test your settings by attempting to start up in single-user mode. Restart the Mac while holding down the Command and S keys. If the Mac does not start up in single-user mode, and instead displays the login window, changes made by the Firmware Password Utility were successful.

    33

  • Reset a firmware password:

    To reset a lost or forgotten firmware password, youll need access to the inside of the Mac (just like resetting a PC BIOS password requires removing the on-board battery).

    1. Shut down the Mac.2. Change the memory configuration by adding or removing RAM.3. Start up the Mac.

    This will clear the firmware password.4. Shut the Mac down again.5. Return the RAM to its original configuration.6. Start up the Mac.

    Note:For information on recovering a lost firmware password on later model computers, such as the MacBook Air (Late 2010), the MacBook Pro (Early 2011), and the iMac (Mid 2011), refer to http://support.apple.com/kb/TS3554.

    Antivirus ProtectionWith virtually no effort on your part, OSX offers a multilayered system of defenses against viruses and other malicious applications, or malware. For example, it prevents hackers from harming your programs through a technique called sandboxingrestricting what actions programs can perform on your Mac, what files they can access, and what other programs they can launch. Other automatic security features include Library Randomization, which prevents malicious commands from finding their targets, and Execute Disable, which protects the memory in your Mac from attacks.

    Viruses are uncommon in OSX, but its good policy to remain vigilant, especially when exchanging files with computers using other operating systems. Regular use of commercial antivirus software such as Norton Antivirus or Intego VirusBarrier can help prevent forwarding of viruses.

    34

  • Network SecurityIn addition to user account and system security, network security is also very important to organizations. TheOSX firewall protects your Mac from unauthorized incoming access from other systems on both a local network and the Internet. The virtual private networking (VPN) service provides a secure method for your computer to remotely access networks.

    OSX FirewallThe OSX personal firewall can be used to block unwanted incoming connections to your computer. A firewall protects the services on your computer from other computers on the network or Internet. Services that are turned on in Sharing preferences already appear in the list of services to which other computers can connect. To prevent incoming connections to one of these services, you must turn off the service in Sharing preferences.

    Enable the OSX firewall:1. Choose Apple menu > System Preferences, click Security & Privacy, and then click

    Firewall.2. Click the lock icon to unlock it, and then type an administrator name and password.

    35

  • 3. Click Start to enable the firewall.

    Configure advanced firewall options:1. While in the Firewall pane of Security & Privacy preferences, click Advanced.

    2. You can choose from three advanced firewall options:Select the Block all incoming connections checkbox to allow incoming connections for basic Internet functions only. Youll still be able to check email and browse the web but this mode will prevent all sharing services found in the Sharing pane of System Preferences, such as File Sharing and Screen Sharing, from receiving incoming connections. To use these services, deselect this option.

    36

  • Select the Automatically allow signed software to receive incoming connections checkbox to allow applications that are already signed by a valid certificate authority to be automatically added to the list of allowed applications, rather than prompting you to authorize them. For example, since iTunes is already signed by Apple, it will automatically be allowed to receive incoming connections through the firewall.

    Select the Enable stealth mode checkbox to prevent unauthorized or unexpected incoming probes from receiving a response from your Mac. Your computer will still answer requests coming in for authorized applications, but other unexpected requests, such as network pings from other computers attempting to discover your Mac, will not get a response.

    3. Click OK when youre done making changes to the advanced settings.Youve configured the built-in firewall service and increased the security of incoming network connections.

    Virtual Private NetworkVirtual private network (VPN) access enables you to take advantage of network services while youre offsite, and simultaneously prevents access by unauthorized individuals. OSX supports standards-based L2TP over IPSec, PPTP, and Cisco iPSec protocols to provide encrypted VPN connections with a built-in VPN client. In order to connect to a VPN, youll need to obtain the VPN server address, VPN type, VPN account name, and user authentication information from the network administrator.

    Set up a VPN connection:1. Choose Apple menu > System Preferences, and then click Network.

    37

  • 2. Click the Add (+) button at the bottom of the network connection services list, and then choose VPN from the Interface pop-up menu.

    3. Choose what kind of VPN connection you want to set up from the VPN Type pop-up menu and give the VPN service a name.

    4. Enter the server address and the account name for the VPN connection.

    38

  • 5. Click Authentication Settings, and enter the user and machine authentication information.

    6. Click OK, and then click Connect.

    39

  • 7. Select Show VPN status in menu bar to use the VPN status icon to connect to the network and switch between VPN services.

    Youve configured your Mac to access a VPN, enabling you to connect remotely to your organizations network while maintaining enhanced security.

    SummaryIn this chapter youve learned the steps for securing a Mac at the user data, system, and network levels. Based on what youve learned, you should be able to perform the following tasks:

    Enable User Account security for your Mac using strong passwords. Configure FileVault to prevent unauthorized access to the data on your disk. Set a firmware password for low-level system protection. Configure the OSX firewall to restrict incoming network access to services and data

    by other computers. Configure your Mac to securely access a remote network using the VPN service.

    For Additional Information The following resource provides more information about Mac security:

    User Accounts in OS X Lion Support Essentials, Peachpit Press, 2011

    40

  • Printing from OSX Computers

    OSXLion lets you quickly connect and share a local printer as well as use remote printers on the network. Mac computers can share printing resources with Windows computers with relative ease, making it much easier to ensure that printers can be accessed by multiple platforms.

    In this chapter youll learn how to configure your Mac to print to a locally connected printer. Then youll learn how to share the printer with Windows and other network users. Finally, youll learn how to set up your Mac to connect to network printers using a variety of common printer protocols as well as how to optimize network printers.

    Connecting to a USB PrinterTo print to a printer, first make sure its connected to your computer, and then add it to your list of available printers. For most USB printers, the printer is added to the list automatically when you connect it.

    Add a USB printer to your list of printers:1. Follow the instructions that came with the printer to set it up and connect it to your

    computer.

    OS X is compatible with most common printers. If you need software for a printer, a dialog appears while youre setting up the printer that offers to download and install the software for you.

    2. Open a document to print and choose File > Print.3. Open the Printer pop-up menu and choose your printer.

    41

    6

  • Share your printer with Mac and Windows users:

    You can share your USB printer with networked Mac and Windows users.1. Choose Apple menu > System Preferences, and then click Print & Scan.2. Select the printer to share in the list at the left.3. Select Share this printer on the network.

    Let Windows users print to a shared printer

    After you share your printer, Windows users can access it by installing Bonjour Print Services for Windows.

    1. On the Windows computer, install Bonjour Print Services for Windows.2. Open the Bonjour Printer Wizard to select a shared printer.

    Printing to a Network PrinterIn addition to connecting to local printers, OSX can easily connect to a variety of popular network printers. Many network printers offer built-in support for Bonjour (the OS X auto network discovery feature), enabling you to automatically add a network printer by following the same steps you used to add a local printer in the previous section.

    To add a network printer to your list of printers, you need to know its IP address or DNS name. You can also enter other helpful information about the printer, such as its location and queue name. In this section youll first learn how to connect to a shared network printer. Then youll learn how to work with PostScript Printer Description (PPD) files to get the most out of shared network printer features.

    Connect to a network printer with LPR:

    In mixed operating system organizations, Line Printer Remote (LPR) is one of the most common network printer protocols. To add an LPR printer youll need the printers IP address or DNS name.

    1. Open a document to print, and then choose File > Print.2. Open the Printer pop-up menu and choose your printer. It may be in the Nearby

    Printers submenu.3. If you dont see your printer, choose Add Printer from the Printer pop-up menu.

    A dialog appears listing any Bonjour, IP, shared, and Open Directory printers on your local network. It may take a minute or two for your printer to appear.

    4. If you dont see your printer in the list, click IP in the toolbar, enter the printers information, and then click Add.

    Your computer can usually detect whether a printer has special accessories installed, such as additional paper trays, extra memory, or a duplex unit. If it cant, a dialog appears that lets you specify them. Make sure the settings in that dialog accurately reflect your printers installed accessories so you can take full advantage of them.

    42

  • Print to a printer shared by a Windows computer:

    You can print to a printer connected to a Windows computer if it supports SMB/CIFS. The printers owner must set it up to be shared and use only the following characters in the name of the printer and computer: A-Z, a-z, 0-9, !, $, *, (, ), _, +, -, , and . (period).

    To add an SMB/CIFS printer to your list of available printers, you need to know the printers workgroup name. You may also need to know the user name and password for the printer.

    1. Open a document to print, and then choose File > Print.2. Open the Printer pop-up menu and choose Add Printer.

    A dialog appears listing any Bonjour, IP, shared, and Open Directory printers on your local network.

    3. Click Windows in the toolbar.4. Select the printer from the browser.

    If prompted, enter the user name and password for the printer.5. Choose the item appropriate for your printer from the Print Using pop-up menu.

    Be sure to choose the correct printer model for the printer youre adding. For more information, see the documentation that came with the printer. If you have an HP PCL-compatible printer thats not listed, choose the printer model that most closely matches your printer.

    6. Click Add.

    Working with PPD filesA PostScript Printer Description (PPD) file contains specialized information about a specific printer model. You need the PPD file to take advantage of a printers special features and capabilities. Without the correct PPD file, you cant do things such as choose from multiple paper trays, use special paper sizes, or print on both sides of the page. OSX comes with PPD files already installed for most popular printers.When you add a printer, OSX chooses a PPD file for the printer automatically. You can change the PPD file to one that you believe better describes your printer. You can use a PPD that came with OSX or download a PPD from the Internet.Change the PPD file for a printer youve already added:

    1. Choose Apple menu > System Preferences and click Print & Scan.2. Select the printer from the list at the left, click Options & Supplies, and then click

    Driver.3. From the Print Using pop-up menu, choose one of the following:

    Other, to choose a PPD file that you downloaded.

    Select Printer Software, to choose a PPD file that came with OSX.

    43

  • 4. Choose the PPD file and click OK or Open.5. Make sure the options under the Print Using pop-up menu match the printers

    features, and then click OK.

    SummaryIn this chapter youve learned the different ways you can use a Mac with local and network printers. OSX includes full support for most popular printers. You can usually add a USB printer just by connecting it to your Mac. Connecting to shared network printers, including Windows printers, is also simple and intuitive. Windows users can print to a USB printer shared over a network by a Mac using the built-in printer sharing capabilities of OSX. Based on what youve learned, you should be able to perform the following tasks:

    Configure a Mac to print to a USB printer. Share a local printer with network and Windows users. Configure a Mac to print to a network or Windows printer. Configure a PPD file for use with a network printer.

    For Additional Information The following resources provide more information about configuring printing on OS X:

    Bonjour Print Services for Windows at http://support.apple.com/kb/DL999 Peripherals and Printing in OS X Lion Support Essentials, Peachpit Press, 2011

    44

  • Instant Messaging

    Organizations use instant messaging to keep local and remote team members and leaders in contact with each other. iChat is the OSX instant text messaging application. It includes support for me.com, Mac.com, AIM, Jabber, and Google Talk accounts. Your instant message appears in a window on your colleagues screen almost as soon as you send it, so your colleague can respond right away. You can use iChat to send files to people across the Internet or on your local network. You can also set up audio and video chats to keep in touch with colleagues around the world.

    iChat supports the Extensible Messaging and Presence Protocol (XMPP) protocol (also known as Jabber), enabling it to communicate directly with a variety of popular messaging services. It also supports Bonjour for automatically discovering fellow iChat users on your organizations network. iChat supports the high quality H.264/AVC codec for video chats.

    In this chapter youll learn how to set up a Mac for instant messaging with iChat and me.com, Mac.com, AIM, Jabber, and Google Talk accounts.

    45

    7

  • Configuring iChatBefore you use iChat, you need to enter information for your service provider accounts. iChat provides an assistant to guide you through the addition of a new chat account. The first time you open iChat, youre presented with the Welcome screen.

    Clicking the Continue button will present the window where you can enter the information to add your first iChat account.

    If youve already added an account in iChat, you add additional accounts in the Accounts pane of iChat preferences by clicking the Add (+) button.

    Both methods present a similar dialog for entering account information.

    46

  • me.com, Mac.com, and AIM AccountsWhen using me.com and Mac.com accounts in iChat, youll be able to exchange instant messages with other me.com and Mac.com users. Youll also be able to communicate with users of America Online Instant Messenger (AIM).

    Add a me.com, Mac.com, or AIM account in iChat:1. Open iChat from the Dock or the Applications folder2. Choose iChat > Preferences and then click Accounts.3. Click the Add (+) button.4. Choose me.com, Mac.com, or AIM from the Account Type menu.

    5. If you dont have a me.com, Mac.com, or AIM account already, click Get an iChat Account to sign up for one.

    6. Enter your me.com, Mac.com, or AIM account name and password.7. Click Done.

    iChat should connect to the iChat service and you may see contacts with AIM or iChat accounts from your Address Book already listed in your Buddies list. If you dont have any contacts with AIM or iChat accounts, your Buddy list will be empty.

    47

  • Other Instant Messaging ServicesIn this section, youll configure iChat for use with a variety of other instant messaging services, such as Jabber, and Google Talk.

    Add a Jabber account in iChat:

    A Jabber account can be configured to work with users of additional instant messaging services such as Yahoo! Messenger, MSN Messenger and ICQ. For more information on enabling your Jabber account for use with these messaging systems, visit www.jabber.com. Your organization may also have its own Jabber server.

    1. Choose iChat > Preferences, and then click Accounts.2. Click the Add (+) button, and then choose Jabber from the Account Type pop-up

    menu. 3. If you dont have a Jabber account already, visit www.jabber.com to sign up for one.4. Enter your Jabber account name and password.

    48

  • 5. If your Jabber service provider gave you specific server information, click the arrow next to Server Options, and then enter the information.

    6. Click Done.Add a Google Talk account in iChat:

    1. Choose iChat > Preferences, and then click Accounts.2. Click the Add (+) button, and then choose Google Talk from the Account Type pop-up

    menu.

    3. If you dont have a Google Talk account already, visit www.google.com to sign up for one.

    49

  • 4. Enter your Google account name and password.

    5. Click Done. Add a Yahoo! account in iChat:

    1. Choose iChat > Preferences, and then click Accounts.2. Click the Add (+) button, and then choose Yahoo! from the Account Type pop-up

    menu.

    3. If you dont have a Yahoo! account already, visit www.yahoo.com to sign up for one.

    50

  • 4. Enter your Yahoo! user name and password.

    5. Click Done.

    SummaryIn this chapter youve learned how to use instant messaging with your Mac, allowing you to collaborate instantly with your colleagues. iChat offers support for leading messaging services such as AIM, Google Talk, and Jabber. The comprehensive messaging support in OSX ensures youll be able to communicate instantly with your colleagues regardless of which operating system or messaging service they use.

    Based on what youve learned, you should be able to perform the following tasks:

    Configure iChat instant messaging for use with me.com, Mac.com, and AIM accounts.

    Configure iChat for use with Jabber and Google Talk.

    51

  • Data Management and Backup

    When you switch from a Windows computer to a Mac, you can transfer over many of your PC files and use them just like you did before. Common Windows file formats including text and PDF documents, images, audio, and video files can be easily opened in OSX. The first step is migrating your files from the Windows machine to your Mac.In addition to migrating your data, its also important to protect your data. You should make regular backups of your system and keep multiple backups of important files. Your organization may have a specific backup policy you should adhere to, but even if it doesnt, a personal backup strategy is always a good practice.

    In this chapter youll learn how to migrate your Windows data to a Mac through various transfer methods. Then youll learn how to set up a backup strategy to protect your important data from potential loss.

    Migrating Data from Windows to a MacYou can connect the Mac and PC together through a network and use Migration Assistant. For a small number of files, you can copy files from your PC onto external or removable storage media and then use the media in your Mac or send Windows files to your Mac over the Internet via email.

    Transfer your Information from a PC with Migration AssistantIf you didnt transfer your information to your Mac when you first set it up, you can use Migration Assistant to transfer your information at any time. For example, using Migration Assistant, you can transfer your user accountincluding all your pictures, music, and filesfrom a PC to your Mac.

    Transfer your information

    You can transfer information over a wired or wireless network. Make sure your computers are connected to the same network.

    1. Open Migration Assistant on your PC, and then follow the onscreen instructions.If you dont have Migration Assistant on your PC, you can download it from the Apple website.

    After you verify that the same passcode is displayed on your Mac and PC, on your Mac select the information you want to transfer.

    52

    8

  • To transfer user accounts, which include all of the users pictures, movies, music, documents, downloads, email messages (from POP and IMAP accounts), contacts, calendars, purchased iPhone or iPod apps, bookmarked websites, and settings, select the checkbox next to the users name.

    The users desktop picture, language, and location are transferred when you select the Settings checkbox (in a user account). Network settings and passwords arent transferred.

    For POP email accounts, Migration Assistant can transfer email messages from Microsoft Outlook Express and Outlook on Windows XP, Outlook on Windows Vista, and Outlook and Windows Live Mail on Windows 7 only from the logged-in user.

    Migration Assistant can transfer contacts from Microsoft Outlook on Windows XP, Windows Vista, and Windows 7 only from the logged-in users account.

    2. Click Continue to begin the transfer.When you log in to a transferred user account, youll find your information just where youd expect it to be.

    If you had a custom desktop picture on your PC, it is set automatically as your desktop picture on your Mac. To change your desktop picture, use Desktop & Screen Saver preferences.

    Your email accounts, which include your email messages and attachments, are set up in Mail.

    Your contacts are in Address Book. Your calendar accounts, which include your meetings and events, are set up in iCal. Your web browsers bookmarks, favorites, and homepage are set up in Safari. iPhone or iPod touch applications you bought in iTunes on your PC are in iTunes on

    your Mac. If your music was in iTunes on your PC, your music is also in iTunes on your Mac.

    Files from the My Documents (Documents), My Videos (Videos), My Music (Music), or My Pictures (Pictures) folders are in the Documents, Movies, Music, or Pictures folders in the Finder, respectively.

    Files from the PCs desktop are on your Mac desktop.

    Copying Files to External StorageAn external storage device or disc is useful for migrating a large amount of data from a Windows computer to your Mac. If your Windows computer has a CD or DVD drive, or a USB port, choose from these options:

    Copy the files from the PC to an external hard disk or storage device, then reconnect the drive to your Mac and transfer the files to your Mac hard disk. Make sure the disk is initially formatted on the PC. Your Mac can read disks natively formatted on a Windows computer, but not vice-versa.

    Burn the files to a CD or DVD on your PC, and then use the discs in your Mac to transfer the files to your computers hard drive.

    53

  • Migrating Files Via EmailIf you have 5 MB or less of data to transfer from your Windows computer, you can send it over email.

    To migrate files via email:

    Follow these steps to migrate files from a Windows computer to your Mac via email:1. Create ZIP files for larger groups of files on the PC.2. Mail all your desired files from Windows to yourself.3. Pick up the files you emailed using Mail on the Mac.

    Backing Up DataFrequent backing up is the best way to protect your data against loss that may occur as a result of hardware failure, user error, data corruption, or even equipment theft. OSXLion includes Time Machine, an application that can automatically back up your system and your important, irreplaceable files to a hard disk or network volume.

    Backing Up Data with Time MachineTime Machine has an intuitive interface for restoring your files or your entire system. In its default configuration, Time Machine keeps an up-to-date copy of the important data on your Macapplications, digital photos, music, movies, documents, etc. You can easily go back in time to restore files if you ever need to. Some file types are ignored by Time Machine by default, such as Safari caches and certain basic system files.

    Setting up Time Machine is as easy as connecting an external USB, FireWire, or eSATA hard drive to your Mac. You can also use a secondary internal disk if your desktop Mac has one (that is, a disk that your Mac doesnt use as a startup disk).

    To configure Time Machine:

    To set up Time Machine for the first time, follow these steps:1. Connect a FireWire or USB hard drive to the computer.

    If you havent specified a backup disk yet, Time Machine asks if you would like to use the newly connected disk as a backup disk.

    54

  • 2. Click Use as Backup Disk to confirm you want to use the disk for Time Machine backups.

    Time Machine preferences will then open with this disk selected as your backup device.

    Thats all you have to do for Time Machine to automatically back up your Mac. The first backup may take a while. You may want to set up Time Machine in the evening so that the initial backup can be done overnight. By default, Time Machine keeps hourly backups for the past 24 hours, daily backups for the past month, and weekly backups until your backup disk is full.

    To manually select a Time Machine backup disk:

    You can manually select a Time Machine backup disk with the following steps:1. Choose Apple menu > System Preferences and then click Time Machine.

    55

  • 2. Click Select Disk.All suitable volumes, other than your startup disk, will be listed.

    3. Choose a disk where you want backups to be stored, then click Use for Backup.

    Alternate Backup MethodsIn addition to hard drives, other methods to back up your data include backing up to a networked server or to a cloud-based service.

    To back up to a server:

    To back up to a disk on a network, the network server must use Apple File Protocol (AFP) file sharing and both your computer and the network backup disk should have OSX 10.5.6 or later installed. To make the network server available to Time Machine, first make sure youve mounted it as a shared volume on your Mac using the Go > Connect to Server command from the Finder.

    To back up to a network server, follow these steps: 1. Choose Apple menu > System Preferences and then click Time Machine.

    56

  • 2. Click Select Backup Disk.

    3. Choose a network server where backups will be stored, then click Use for Backup.An alternate method can be used if you have a network home folder set up at your organization. Any files you store in your network home folder will get backed up, since the servers files get backed up as network home folders reside on the server, not on your local drive.

    SummaryIn this chapter you learned about data management and how to migrate your files from a Windows computer in a variety of ways. You also learned how to back up your information with your Mac and protect against data loss and potential financial risk. Time Machine makes the process highly intuitive.

    Based on what youve learned, you should be able to perform these tasks:

    Migrate data from a Windows computer to your Mac using Migration Assistant, external storage, or email.

    Configure Time Machine for use with an external hard drive. Back up data on a regular basis with Time Machine. Back up data to a server or cloud-based service.

    57

  • Cross-platform Compatibility

    OSX enables you to seamlessly integrate your Mac into Windows and mixed operating system network environments. You can use Microsoft Office, connect to most printers and cameras, join PC networks, and even run Windows on your Mac. OSX includes built-in support for the latest version of Microsoft Exchange Server, so you can use your Mac with all the features and applications you loveat home and at work, and have all your messages, meetings, and contacts in one place.

    A native version of Microsoft Office is available for OSX, and it features a Mac-friendly interface that lets you create documents with Word, presentations with PowerPoint, and spreadsheets with Excel just like on a Windows PC. Your Mac is compatible with Microsoft Office for Windows, so you can easily share documents with friends and colleagues. Even if you dont have Office installed on your Mac, you can use Quick Look to take a peek at Office documents without having to open an application. OSX also offers OS-level support for key file types like PDF, TXT, JPEG, PNG and even PSD.

    Every new Mac lets you install Windows operating systems such Windows 7 and run them at native speeds, using a built-in utility called Boot Camp. Setup is simple and safe for your Mac files. After youve completed the installation, you can start up your Mac using either OSX or Windows. Or if you want to run Windows and Mac applications at the same time without restarting, you can install Windows within OSX using VMware or Parallels software.

    In this chapter youll learn about applications with versions available for both Mac and Windows. Youll also learn about Mac applications with built-in support for Windows files. Then youll learn how to set up your Mac to run Windows operating systems natively with Boot Camp, and virtually with VMware Fusion and Parallels Desktop.

    58

    9

  • Cross-platform CompatibilityYou can work with Windows files within OSX using applications that have versions available for both operating systems. Alternatively, many Mac-only applications can import files formatted with Windows file formats.

    Cross-platform ApplicationsSoftware developers offer versions of their applications for both Windows and OSX, in consideration of the mixed operating system environments deployed by many organizations.

    Available cross-platform productivity applications include:

    Microsoft Office, including Word, Excel, Entourage, Messenger, and PowerPoint Adobe Acrobat, Photoshop, Illustrator, InDesign, After Effects, and Premiere Pro QuickBooks from Intuit FileMaker

    Cross-platform File TypesMany native Mac applications can import files created in Windows. They also let you view the most common file types, including Office documents, PDFs, images, text files, MP3s, videos, ZIP files, and more.

    Mac applications with support for Windows files include:

    Pages can import Microsoft Word and most other Windows text formats. Numbers can import Excel as well as Open Financial Exchange files from Quicken,

    comma-separated-value and tab-delimited files. Keynote can import PowerPoint presentations. Any QuickTime-compatible application can import .AVI video and .WAV audio files.

    Running Windows on a MacAn Intel-based Mac uses the same processor as computers running Windows, enabling it to directly run Windows software in a variety of ways. You can boot Windows operating systems natively on a Mac by using the Boot Camp software, which is included with OSX. You can also run Windows directly in OSX with virtualization applications such as VMware Fusion and Parallels Desktop, which create virtual Windows machines running on your Mac desktop. In this chapter youll learn how to configure Boot Camp and then learn about virtualization.

    59

  • Boot CampBoot Camp lets you install Windows on a Mac computer in its own partition, using a Microsoft Windows installation disc that you provide. After installation, you can use either Windows or OSX on your Mac computer. While using Boot Camp, Windows applications have full access to multiple processors and multiple cores, accelerated 3D graphics, and high-speed ports and networking such as USB, FireWire, Wi-Fi, AirPort, and Gigabit Ethernet.

    Installing Windows on your Mac computer involves the following steps:

    Step 1: Check for Updates

    Step 2: Prepare your Mac for Windows

    Step 3: Install Windows

    Step 4: Install the Windows support software

    The following instructions present an overview of the steps required to install Windows on a Mac computer. However, you should download, print, and review the Boot Camp Installation and Setup Guide PDF which is accessible through the Boot Camp utility.

    Step 1: Check for Updates

    Be sure to install all OSX updates so Windows will install successfully.1. Log in to an administrator account on your Mac, quit all open applications, and log out

    any other users on the computer.2. Choose Apple menu > Software Update.

    Install all available updates. If your computer restarts after installing an update, choose Apple menu > Software Update again to install any additional updates.

    3. Go to www.apple.com/support/bootcamp and check whether you need additional updates.

    60

  • Step 2: Prepare your Mac for Windows

    Boot Camp Assistant helps prepare your Mac for Windows by creating a new partition for Windows and then starting the Windows installer.

    Before you start the Assistant, make sure you have a blank CD or DVD or an external drive formatted as MS-DOS (FAT) that Boot Camp Assistant can download the Windows support software to.

    1. Open Boot Camp Assistant (in the Utilities folder).

    61

  • 2. Follow the onscreen instructions for downloading the Windows support software.

    3. Follow the onscreen instructions for saving the Windows support software to a CD, DVD, or external disk.

    62

  • 4. Follow the onscreen instructions for creating a partition for Windows.

    Step 3: Install Windows

    Refer to your Windows documentation for general information about installing and setting up Windows.

    If you already quit Boot Camp Assistant without installing Windows, open Boot Camp Assistant and continue from where you left off.

    63

  • 1. Insert your Windows 7 installation disc.2. In Boot Camp Assistant, click Start Installation.3. Follow the onscreen instructions, until youre asked where to install Windows.4. When youre asked where to install Windows, select Disk 0 Partition 3 BOOTCAMP.5. Click Drive options (advanced).6. Click Format, and click OK.7. Click Next to format the Windows partition using the NTFS file system.8. Follow the onscreen instructions to finish installing and configuring Windows.

    Step 4: Install the Windows Support Software

    After installing Windows, install Mac-specific drivers and other support software for Windows. The support software installs Boot Camp drivers to support your Mac hardware, including AirPort, the built-in camera, the Apple Remote, the trackpad on a portable Mac, and the function keys on an Apple Keyboard. The software also installs the Boot Camp control panel for Windows and the Apple Boot Camp system tray item.

    1. If you cant find the CD, DVD, or external disk with the support software you downloaded, open Boot Camp Assistant and download the software again.

    You can quit the assistant after you save the software without creating a new partition.2. Insert the CD or DVD or connect the external disk with the Windows support software.

    If the installer doesnt start automatically, browse the CD, DVD, or external disk using Windows Explorer, and then double-click the setup.exe file in the Boot Camp directory.

    3. Follow the onscreen instructions.Important: Do not click the Cancel button in any of the installer dialogs.

    4. After your computer restarts, follow the instructions for any other installers that appear.

    5. Check for updated Windows support software by using Apple Software Update or going to www.apple.com/support/bootcamp.

    Once youve installed Windows and the Boot Camp drivers, you can start using Windows on your Mac. Boot Camp makes it easy to start up your computer using either OSX or Windows. You can set the default operating system for your computer using Startup Disk preferences (OSX) or the Boot Camp control panel (Windows). You can also select an operating system as your computer is starting up.

    64

  • VirtualizationIf you only need to run Windows applications occasionally or you dont require the increased performance of Boot Camp, virtualization offers instant access to Windows without having to leave OSX. VMware Fusion and Parallels Desktop are two popular third-party Windows virtualization solutions.

    VMware Fusion

    To download and purchase VMware Fusion, visit http://www.vmware.com/products/fusion/.

    Parallels Desktop

    To download and purchase Parallels Desktop, visit http://www.parallels.com/products/desktop/.

    Note:In addition to the virtualization software, youll also need a full-install Windows installation disc of the Windows version you want to use.

    SummaryIn this chapter youve learned about the cross-platform compatibility of OSX, enabling you to work seamlessly with Windows users. Many Windows programs like Microsoft Word and Adobe Photoshop are also available for the Mac. OSX applications like iWork offer support for common Windows file formats. You can run Windows natively on a Mac via Boot Camp or in a window in OSX with virtualization applications like VMware Fusion and Parallels Desktop.

    Based on what youve learned, you should be able to perform these tasks:

    List applications that are available on both Windows and OSX. List native Mac applications that support Windows file formats. Configure a Mac to run Windows natively with Boot Camp. List third-party virtualization options for running Windows.

    For Additional Information The following resource provides more information about using Windows files and applications with a Mac:

    Boot Camp 4.0, OS X Lion: Frequently asked questions at http://support.apple.com/kb/HT4818

    65

  • Additional Resources

    Mac Integration Basics ExamAdd Apple Certified Associate - Mac Integration 10.7 to your credentials. Instructions for taking the online exam are at: http://training.apple.com/itpro/macinteg/exam.

    OSX Training & CertificationApple offers comprehensive certification programs for IT professionals in business, education, and other fields. Review the training and certification options below to find the path best suited to your goals.

    OSX CoursesCourses are taught by Apple Certified Trainers through a worldwide network of Apple Authorized Training Centers (AATCs).

    OSX Support Essentials 10.7: Provides an intensive and in-depth exploration of troubleshooting on OSX, touring the breadth of functionality of OSX systems.OSX Server Essentials 10.7: Gives technical coordinators and entry-level system administrators the knowledge to implement a OSX Server-based system.OSX CertificationsApples OSX Certifications are designed for IT professionals who: Support OSX users in a business, education institution, or school district Manage networks of OSX systems in an organizationfor example, a teacher or a

    technology specialist who manages classroom networks or computer labs Manage complex, multi-platform networks that include OSX systemsApple Certified Associate - Mac Integration certification verifies an understanding of the different ways to integrate a Mac within a Windows or other standards-based network.

    66

    10

  • Apple Certified Support Professional (ACSP) is next on the OSX certification path, validating basic OSX support and troubleshooting skills.Apple Certified Technical Coordinator (ACTC) certification builds on ACSP by certifying essential OSX Server support and troubleshooting skills.For more information about all available Apple Certifications, visit http://training.apple.com.

    BooksThe Apple Training Series books constitute a key part of Apples official curriculum, covering OSX and OSX Server. These books offer an independent approach to training and certification, guiding students step-by-step through real world projects. The books are also excellent references for providing assistance with performing specific tasks and technologies.

    There are two titles in the Apple Training Series, written for IT support and system administration personnel:

    OSX Lion Support Essentials OSX Lion Server EssentialsFor more information about the books, visit Peachpit Press at http://www.peachpit.com.

    SupportIn addition to the AppleCare Product Plans, Apple provides online support at http://www.apple.com/support where you can access technical articles, download manuals, and join discussion forums.

    The Apple Support site also provides some online training materials for those who are new to OSX:Switch 101: Learn how to get around and access everything on your Mac; find out how to move your old PC files to the Mac; figure out how to connect your printer, iPod, digital camera, or other device; learn how to do those tasks you did on a PC on a Mac; learn how to use the software that came with your Mac; or even find out what to do when things dont go as planned. Switch 101 is located online at http://www.apple.com/support/switch101/

    Mac 101: Learn how to get around your Mac desktop (or find out what a desktop is, for that matter); figure out how to connect your printer, iPod, digital camera, or other device; discover email and the Internet; learn how to do various tasks; learn how to use the software that came with your Mac; or even find out what to do when things dont go as planned. Mac 101 is located online at http://www.apple.com/support/mac101/

    67