Computing option with "no funds"
-
@g.jacobse said:
Lat night had an issue with the Executive Director accessing a network resource because of no AD / Domain. With three 'file servers' each has different user accounts which becomes a pain to manage.
That seems like a minor issue compared to "we can't afford it." Moving to AD means you need not only Windows computers but computers with Windows Pro which eliminates the possibility of having users bring in their home machines (AD does this too, realistically, even if they had Pro machines at home - asking people to supply their own computers is probably not legal, demanding that they turn them over to the company to "own" them is certainly not legal.)
There are plenty of options that don't require AD. I work in a non-AD shop with nearly 300 users in 18 countries (and many locations in some of those countries like two in the US, three in Canada, two in Spain, etc.) AD is not a foregone conclusion. It never was and it is far less of one today.
-
@Dashrender said:
Also, can you manage or lock down Chromebooks? i.e. prevent other google users from using a device sorta like you can a windows device on a domain?
Yes, Chromebooks do all of that. Although it costs extra for the enterprise management suite.
-
It really sounds like you are a perfect candidate for Google Apps and Chromebooks, as Dash suggests. If you can't afford AD and you need to support a lot of people you are pretty much limited to one of three models:
- Windows without AD which is really complex.
- Regular Linux with an central authority like AD but not AD
- Chomebooks
Each of those is low enough in cost that you can theoretically afford to do it. The Windows without AD route is by far the worst of the three. The Linux route means a lot of work for you, it requires the most knowledge. The Chromebooks route is by far the easiest and most useful. There is a reason that so many companies are moving to that model.
-
The Chromebook ecosystem is actually a really awesome one. Once you go that route your costs become extremely predictable and management becomes super easy. You really can gain huge benefits going that way.
-
Agency wise (as a whole) getting into AD shouldn't be that costly. We can get Server 2012 with software assurance for next to nothing, add the required CALs and go forward. Being a Non Profit helps.
It is just this one department hasn't any funds. Over all funds are available and useable. I've been asked to get a better solution for backups - Unitrends is one option, as is the readyNAS you have been working with. And with the readyNAS, with two of them, I can set up off site replication and increase our data survivability.
Things can be done without AD, however there are a number of things which make having AD so much easier. I have the hardware - it needs to be upgraded a bit - but I have it.
-
Considering the geographically disperse company you have there, AD (in general) will require either dedicated communication links or VPN tunnels. Either costly or potentially painful to manage (granted once a VPN site to site is up, you rarely have to deal with it).
What advantages are you gaining using AD company wide vs moving to Google Apps or O365 along with some sort of management solution for the desktops outside of AD (managed engine for example).
-
Check out Tech Soup if you haven't already. They give stuff to non-profits. Also maybe check out electronics recycling centers for free old stuff.
-
@g.jacobse said:
Agency wise (as a whole) getting into AD shouldn't be that costly. We can get Server 2012 with software assurance for next to nothing, add the required CALs and go forward. Being a Non Profit helps.
I was basing the costs off of AD being free. If it costs anything, it is that much more. Your issue is that you can't afford the Windows machines necessary to connect to AD.
-
@g.jacobse said:
Things can be done without AD, however there are a number of things which make having AD so much easier. I have the hardware - it needs to be upgraded a bit - but I have it.
You're early post about people bringing their own machines or getting Chromebooks suggested that you didn't have and couldn't get the hardware. Do you have access to company-owned Windows Pro machines or not? I'm confused.
-
@Dashrender said:
Considering the geographically disperse company you have there, AD (in general) will require either dedicated communication links or VPN tunnels. Either costly or potentially painful to manage (granted once a VPN site to site is up, you rarely have to deal with it).
Pertino works really well for this.
-
@scottalanmiller said:
@Dashrender said:
Considering the geographically disperse company you have there, AD (in general) will require either dedicated communication links or VPN tunnels. Either costly or potentially painful to manage (granted once a VPN site to site is up, you rarely have to deal with it).
Pertino works really well for this.
But as you mentioned work best with windows machines, not personally owned Chromebooks.
-
@Dashrender said:
But as you mentioned work best with windows machines, not personally owned Chromebooks.
Doesn't work on Chromebooks at all. But Chromebooks don't need it as they get their storage from Google.
-
Funny I'm in an office of very high end tech people discussing right now how many of them have managed to almost never work in an environment with AD at all.
-
@scottalanmiller said:
Funny I'm in an office of very high end tech people discussing right now how many of them have managed to almost never work in an environment with AD at all.
Are the machines those users are working on managed by the company at all? just curious.
-
@Dashrender said:
@scottalanmiller said:
Funny I'm in an office of very high end tech people discussing right now how many of them have managed to almost never work in an environment with AD at all.
Are the machines those users are working on managed by the company at all? just curious.
It's a mix. Sometimes they are, sometimes they are not. Both models exist and flourish. On the west coast, as we mentioned in another thread, I see unmanaged a lot, but away from that I see managed being the more common.
-
A lot of AD and group policy exists to prevent users harming themselves and/or the company. If I could stop working with dangerous idiots I'd be much more comfortable with getting rid of AD.
-
@Nic said:
Check out Tech Soup if you haven't already. They give stuff to non-profits. Also maybe check out electronics recycling centers for free old stuff.
Yup - I've been in the NPO arena now for about nine years,.. so I've used them plenty. In the past year I did learn of GrassRoots and can now add free hosting to the mix. Being a NPO is great... and also not. I like finding options that don't include spending buckets of money but still get the results needed.
I don't like to say I think outside the box,.. Id rather say - what box!
-
@scottalanmiller said:
@Dashrender said:
@scottalanmiller said:
Funny I'm in an office of very high end tech people discussing right now how many of them have managed to almost never work in an environment with AD at all.
Are the machines those users are working on managed by the company at all? just curious.
It's a mix. Sometimes they are, sometimes they are not. Both models exist and flourish. On the west coast, as we mentioned in another thread, I see unmanaged a lot, but away from that I see managed being the more common.
It might be a topic for another thread... but why would you go 'unmanaged' in a large office? How do you allocate security on network shares as easy as (at least I understand) you can with having a Domain and AD?
-
@g.jacobse said:
It might be a topic for another thread... but why would you go 'unmanaged' in a large office? How do you allocate security on network shares as easy as (at least I understand) you can with having a Domain and AD?
The same way Sharepoint online does, or Google Docs does. It's all done on the hosting solution. The local account doesn't matter. Web account does.
-
@Carnival-Boy said:
A lot of AD and group policy exists to prevent users harming themselves and/or the company. If I could stop working with dangerous idiots I'd be much more comfortable with getting rid of AD.
If you can provide all the required services via web pages or VDI or TS, and segregate the BOYDs from your production network, why do you need to care about the end device, the interfaces to the remote systems are what are protecting your data.
