Enterprise Software

Ready, set, Lion! How to rein in users eager for the new Mac OS

Mac OS X Lion is out, but the ability of users to download an OS as easily as they do Angry Birds might not sit well with IT. Erik Eckel provides some tips for applying caution to the over-eager user.

It's no secret Apple's new Mac OS, Lion, will impact businesses. The OS includes  numerous improvements that will affect business operations, network administrators and users. But TechRepublic readers have been correct pointing out that Apple's new App Store, which makes it possible for users to download and install the new OS, may prove disruptive in some organizations.

Historically, small businesses depend upon an IT consultant to maintain and upgrade their systems. Midsize organizations and large enterprises typically possess their own IT staffs, which usually meticulously test new operating systems and upgrades before deployment within production environments.

Certainly, volume licensing still affords larger firms (especially those that lock down networks) the ability to maintain the status quo and deploy Mac OS X Lion as before. But now there's a wrinkle. Scratch that. Now there may be a paradigm-shifting rip in the very fabric of the IT universe continuum; users can download the OS and install Lion just as they do Angry Birds on iPhones and iPads.

Was that last sentence hyperbole? Maybe. Just a little. But truthfully, users' new ability to download and install a new operating system platform with a few clicks denotes a definitive change from normal business practices. Apple's crossing the Rubicon, and businesses have no choice but to follow.

The tide is shifting

In early July, Apple "announced that over 15 billion apps have been downloaded from its revolutionary App Store by more than 200 million iPhone, iPad and iPod Touch users worldwide." The announcement added that more than 400,000 apps are available.

Clearly, users enjoy downloading and installing their own software. But users, at least on the Windows platform, tend to also trigger viruses and spyware infections. Thus, user application empowerment isn't always a good thing.

Businesses beware

Users are going to want to download and install Lion. Yet, there are numerous programs and applications that haven't yet been tested with the new OS. Chances are Lion may break some very important and potentially critical business applications. My consultancy received alerts from Mac software developers before the OS was released. Those alerts warned customers to delay installing the new OS until the developer could test its software on the platform and ensure or patch any incompatibilities.

Some users just aren't going to wait. No genius is required to predict the support calls: "I'm trying to close the paper, on deadline, but I can't open the publishing software"; "I'm trying to summarize recent clinical test results but the software generates a strange error I've never seen before"; and "why can't I open my database?"

What can businesses do to prevent users from prematurely downloading and installing Mac OS X Lion? A few ideas come readily to mind:

  1. Communicate. Make sure users know to hold off, if your organization plans to wait to install the OS. Send an email. Better yet, bring it up at a regular managers' or directors' meeting.
  2. Leverage Internet filtering. Block access to Apple's iTunes Store on your network via proxy server or router. Apple even helps show how.
  3. Arrest administrative privileges. Don't provide users with the system administrator password or permissions for their Macs. If your organization has extended admin rights to users, now might be the time (and Lion's release the excuse) to revoke those rights. Then ensure you deny non-admin users the ability to make system changes.

Additional Lion coverage:


Erik Eckel owns and operates two technology companies. As a managing partner with Louisville Geek, he works daily as an IT consultant to assist small businesses in overcoming technology challenges and maximizing IT investments. He is also president o...


The biggest problem I see is keeping the workforce on an even keel. Small business' already have the issue of not wanting to limit the workforce from supporting themselves to avoid having to pay IT people to do routine and mundane tasks. But now instead of having someone running a .0.X different version of Entourage or Outlook, it becomes very easy (not that it was really hard before) to have people running significantly different operating systems. I am a huge fan of making managers manage their people's behavior rather than forcing the IT folks to be babysitters, but this may be the time to start locking down the boxes. Or at very least start providing much more specific information to the end users about they can and cannot do.


There is still a big problem with this update. Apple really should've thought this through for Enterprise environments. If I block the iTunes store from my network, I'm going to have a MASSIVE amount of complaints from users on their iPads, iPods, and various MacBooks who genuinely want to download various other programs or apps. This is NOT a solution...


Can't believe an IT professional would allow users what they want! How did they sneak apple products past your guard! We should unite and bring back MS-DOS..........


I was thinking that anything that has Snow Leopard as a prerequisite is really just a service pack. If you can't install this software from a clean hard drive it's not a complete operating system. I have to admit that $30 is a good deal but I want bootable media.


Tell them that they are still running a 10 year old operating system and that it isnt worth it to pay for what amounts to a service pack, especially considering that you get those from Microsoft free of charge.


You can install on a clean hard drive and you can put it on a USB thumb drive. Check Macworld.com for all the details. It is more that a service pack. The 200+ new features really takes the OS to the next level in computing. So while I can have the future at home, I have to use Windows XP, a true 10+ year old OS at work. Next year we might get Windows 7 so I'll only be 5 years behind!

Editor's Picks