MacTech 02112014

MacTech Group Agenda

Tuesday, February 11, 2014

2:00 to 4:30 pm — Room B16-B Hillsborough Bld.

1) Announcements – 5 min

 OIT will support only version 10.8.5 or newer of Mac OS X after Dec 31, 2014 – Current 10.7.5

 OS X versions that shipped with Intel Hardware: support.apple.com/kb/HT1159

 *Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752?viewlocale=en_US

 Apple Education Support Line 800-800-2775 use this number only. Always verify Apple Care Coverage with purchase info.

 OIT does not have a  support policy for Boot Camp. & OIT  does not support Classic mode at all.

 Mac Collection Licenses and Media info at www.ncsu.edu/software/available-software/product.php?software=106

 Trend Micro Office Scan for Macintosh – www.ncsu.edu/it/antivirus. Managed antivirus for campus.

 OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.

 Unity Macintosh Workflow uses /Users/$uid$ in the Active Directory configuration with a local home on each machine

 Modified Unity Macintosh Installs are supported by the unit which has made the modifications.

 OIT supports only Apple, Intel (i386) hardware for Mac OS and software. Only unmodified iOS is supported.

 Please remember to check prices at www.apple.com/education/pricelists/ to verify best price with NC State Marketplace

 Authorized NC State personnel wanting to get access to training and tools for Apple Certified Technician should register at gsx.apple.com   Email Everette_Allen@ncsu.edu for Sold-to Account number and approval.

 UNC Combined Pricing Initiative (CPI) oit.ncsu.edu/it-purchases/background-unc-cpi

 Casper Suite Enterprise service https://nc.jamfcloud.com/  (or go.ncsu.edu/mdmadmin)

2) Flash Update Automation changes – 10 min

OIT has updated the procedure for silent, unattended update and patching of Adobe Flash.  

oit.ncsu.edu/macintosh/adobe-flash-os-x-unattended-silent-install

Changes are: a) addition of command line tool to force immediate update of Flash if set for autoupdate, b) additional configuration to set the number of days between update checks, and c) links to the administration guide for version 12.x.  There is also 2 new packages in Casper: a) NCSU-OIT-Install Adobe Flash Player 12 Silent.dmg and b) NCSU-OIT-Silent_Auto_Daily_Update_mms.cfg.dmg to help administrators patch quickly. Discussion

3) Casper Machine Move Issue  – 20 min.  

We are seeing extremely slow move from the old server at swm.oit.ncsu.edu to the new nc.jamfcloud.com server…. only about 20 per day.  We are working with the vendor on this but OIT would like to work with site admins to do forced moves of machines using either a) the correct, site-specific QuickAdd package via ARD, ssh, or console  or b) by forcing the correct policy to install using the jamf binary.  For force install information see: 

http://oit.ncsu.edu/macintosh/casper-8-9-forced-move-instructions

OIT would like to have all OS X and iOS devices moved by Feb  28, 2014 if possible.

Discussion.

4) Network Segments in Casper  – 20 min.  

Use of Network segments??  Issue with using Nomad ranges:

We have discovered a “trap” to avoid when creating Network Segments in the Casper Suite Enterprise service in our environment. Recall several months ago OIT moved the Nomad system to use of PAT technology to handle the volume of devices using the campus wireless system.  This scheme assigns private 10.x.x.x ip addresses to devices while sharing a range of 152.152.7.224.x as the public ip address. During some testing on Feb 5 a Casper Network Segment of range 152.152.7.224.5 to 152.152.7.224.6 was created (looks like only 2 machines) and has since been removed.  However we have found that several laptops that used nomad in DH Hill had their Department and building changed in Casper Inventory by the “Override Building in Inventory” and “Override Department in Inventory” check boxes that are a feature of Casper Network Segments.

OIT is recommending two steps to avoid this:

a) Do not use Nomad Network ip addresses as ranges in Casper Network Segments

b) Do not use (uncheck) the “Override Building in Inventory” and “Override Department in Inventory” setting in Casper Network Segments at all.  A policy should be used instead if Inventory changes are needed. 

Discussion

5) Casper Suite 9.2.3 update  – 10 min.  

Would like to move the hosted casper and all JDS servers to 9.2.3 Monday Feb 17, 2014. Discussion.

6) Antivirus Update  – 10 min.  

OIT has selected Kerspersky Endpoint protection as the replacement for our current antivirus package.  There will be 2 target groups a) university owned machines will get a managed version and b) all others (BYOD) will get standard retail package

Antivirus Service team has following target dates: 1) March 1, 2014 have BYOD version available for download and use from www.ncsu.edu/antivirus and 2) April 7, 2014 to have managed servers and experimental install packages available.  Trend Micro license drops dead June 30, 2014.  Discussion.

7) Rumors and Wishes – 10 min.  Discussion of what we might expect for Apple products or not.  Bring your favorites.

8) Q&A  – 5 min.  You ask we try to answer

Next meeting – Mar 11, 2014 in Room B16-B Hillsborough from 2:30-4:30 pm.

MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun,  Jul, Sep, Oct, Nov, Dec

MacPolicy – 2nd Tuesday of every other month: Jan, Mar, May, Jul, Sep, Nov.

Neither MacPolicy or MacTech will meet in August.  All meetings will be held in B16-B Hillsborough Bld unless otherwise announced.