Mac Policy, Mac Tech

Combined MacPolicy – MacTech 11142017

By ega

MacPolicy-MacTech Groups Combined Agenda
Tuesday, Nov 14, 2017
2:30 to 4:30 — Room B16-B Hillsborough Bld.

 

  • Announcements – 5 min

 

    1. OIT only supports OS X 10.11.6 and macOS 10.13 or newer
    2. Status page for jamfcloud.com services see http://status.jamfsoftware.com
    3. OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
    4. Slack group ncstateit.slack.com #macintosh
    5. Apple Sales Rep: Paul Petrogeorge-paulpetro@apple.com & System Eng: Dave Anderson.
    6. macOS versions that shipped with Intel Hardware: support.apple.com/kb/HT1159
    7. Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752?viewlocale=en_US
    8. Apple Education Support Line 800-800-2775 use this number only. Always verify Apple Care Coverage.
    9. Antivirus for university owned devices – go.ncsu.edu/antivirus
    10. Unity Macintosh Workflow uses Active Directory configuration with local home directory at /Users/$uid$
    11. OIT supports only Apple, Intel (i386) hardware for Mac OS and software. Only unmodified iOS is supported.
    12. Please remember to check prices at www.apple.com/education/pricelists/ to verify best price with NC State Marketplace
    13. Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request invitation by opening a help desk ticket at  help@ncsu.edu  Must login to GSX  monthly!!
    14. UNC Combined Pricing Initiative (CPI) oit.ncsu.edu/campus-it/it-purchasing/unc-combined-pricing-initiative-cpi-program-at-nc-state/
    15. JAMF Pro Enterprise service go.ncsu.edu/jamf,  go.ncsu.edu/casperinfo and go.ncsu.edu/uwc for details

  2. New Apple Student Reps and System Engineer – 15 min
    Dave Anderson will be the new area System Engineer for Apple.  He is still in training but should be available in early Dec 2017.  There are 2 new Apple Student Reps Carley and Austin. Introductions.

  3. Nov Apple Bulk Buy is on – 5 min
    The CPI Apple Bulk Buy is in effect now and must be completed with Apple Quote by Nov 24, 2017.
    If there are shipping delays be aware if the holidays for delivery. Discussion

  4. Training Needs – 5 min
    1. OIT-Managing OS X with Jamf Pro – Request –
      reporter.ncsu.edu/link/courseview?courseID=OIT-JPro01-JPro01&deptName=OIT
    2. OIT-Casper Best Practices for Packagers – Request – webapps.ncsu.edu/classmate/workshop/index/details/workshopId/351
    3. OIT-Advanced OS X Management with Jamf Pro – Request – webapps.ncsu.edu/classmate/workshop/index/details/workshopId/881
    4. CrashPlan for Sub-Org Administrators – Request – reporter.ncsu.edu/link/courseview?courseID=OIT-CPlan1-CPlan1&deptName=OIT
    5. Local Based Commercial Training – training.computertree.com/course/
    6. JAMF Pro Training – www.jamf.com/training/

  5. Service Updates- 10 min
    1. Jamf Pro – Will upgrade JSS/JCDS servers  to 10.0.0 Nov 15th, JDS is frozen per Jamf.
      Service Now Plugin for JAMF Pro and waiting on MID Server config in Service Now Dev.
    2. CrashPlan – Waiting on Code42 to approve move to non-appliance hosted with V6.5.x upgrade and SSO(~Nov 2017). Will require a client reinstall and full backup.  Old 5.x servers will remain available until Cold Storage purges, ~ 1 year.
    3. NetInstall – nuke.nbi/sh is macOS 10.12.3. 10.11.3 set (nuke10113.nbi & sh). are still available if needed. 10.13.0 is not working and is broken with gray screen error which Apple is aware via radar.
    4. AutoPKGR – Has issue with Jamf Pro v10 that requires manual PKG upload but working on this.
    5. Antivirus – New version before Thanksgiving. Current: NCSU-Campus-System Center Endpoint Protection for macOS Installer.pkg at nc.jamfcloud.com/packages.html?id=3853
    6. DEP/VPP/Apple School – Apple School Manager still waiting on Apple to move NCSU.
    7. Endpoint Protection – Renewed effort but no approved Standard
      Draft “BluePrint for macOS Endpoint Protection” (https://docs.google.com/document/d/1Pdv8Z3aU374i1cNwvvrEd3yRnmeU2qXRolpYwP8jaUs/edit),  Also looking at creating Service Now “Endpoint Compliance” report for all points of the standard.

  6. Reminder: Spirion Identity Finder Deployment – 5 min
    OIT-SC has asked that this be deployed on all capable, managed devices by Nov 27, 2017. https://sysnews.ncsu.edu/news/59fb6567 To help with this OIT has provided the NCSU-Campus-SpirionIdentityFinder10.0.2.0.pkg in JAMF Pro.  Discussion

  7. Reminder: IT Standards – 5 min
    –Endpoint Protection NOT YET approved. https://docs.google.com/a/ncsu.edu/document/d/1z1ZQm8HrEX27xjImjQtLPAZ15N1mfGjvsjHH1HTGLcM/edit?usp=sharing  
    -Patching Standard is approved:
    https://policies.ncsu.edu/rule/rul-08-00-14/
    -Network Printer Security Standard is approved:
    https://policies.ncsu.edu/rule/rul-08-00-13/
    Discussion

  8. First  in-the-wild macOS ransomeware at NCSU – 15 min
    NCSU Engineering has seen the first in-the-wild case of macOS ransomeware we are aware of.  This appears to be a variant of “applepass@mail.com” but it was able to create a persistent EFI password and set other EFI variables that prevented booting from external volumes.  Dan will talk about the steps they went thru to gain control of the device again.  Discussion

  9. Q&A – 15 min
    You ask we try to answer

Next meeting:
MacPolicy – Tue. Feb 13, 2018 in Room B16-B Hillsborough from 1:30-2:30 pm.
MacTech – Tue. Dec 12, 2017 in Room B16-B Hillsborough from 2:30-4:30 pm.
MacPolicy – 2nd Tuesday each quarter in Feb, May, Aug, Nov.
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacPolicy and MacTech will not meet in July.  
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.