Ok, so it has been a while, but I have recently spent the last few days working with only MacAdmin machines, both the server and the clients.

I am impressed with some things, and annoyed by others.

The manual that comes with MacAdmin blows. It is terrible. The only way it helps is when installing a fresh setup, once you have to change configurations you have to get creative.

There is an override password that works on all the machines that you install it on, one that the admin sets. We had to use that alot in the past coulpe of days because we completely restructured out network, so things had stopped working. The most frustrating thing about the Overide is that the computer has to be turned on without being able to contact the MacAdmin server, this is all fine and good, except that the machine has to wait before booting all the way to try and contact the server, my suggestion bring a good magazine, you will be waiting a while.

MacAdmin, when working properly, really locks down a system. Default protection is very restraining, you everything is read/execute.
I haven't played much with the server, but if its destributed file synchronizing is as powerful as RevRdist, then you would be able to keep that system clean, and system upgrades would be a snap.

I had a problem with the server Yesterday, I tried change a luser account into a superuser account, but the luser group restictions kept overiding the superuser group priveleges. I think it is probably something simple that I am missing, if it was a unix--type OS, I would have had it done in a second, but the gui is getting in between me and what I need to see.

Anyway, I have only just come to a Windows machine that is as locked down as a MacAdmin client machine, and the management of the MacAdmin machine was incredibly simple compared to what I had to do to hack to get admin on the heavily policy-edited NT box.

anyway, that is my recent experience with macadmin,
dhej