MacTech 12122017

MacTech Groups Agenda
Tuesday, Dec 12, 2017
2:30 to 4:30 — Room B16-B Hillsborough Bld.


  • Announcements – 5 min


    1. OIT only supports OS X 10.11.6 and macOS 10.13.2 or newer
    2. Status page for services see
    3. OIT Macintosh Support Web Site for updates.
    4. Slack group #macintosh
    5. Apple Sales: Paul & Sys Eng: Dave
    6. macOS versions that shipped with Intel Hardware:
    7. Vintage and Obsolete Apple Products:
    8. Apple Education Support Line 800-800-2775 use this number only. Always verify Apple Care Coverage.
    9. Antivirus for university owned devices –
    10. Unity Macintosh Workflow uses Active Directory configuration with local home directory at /Users/$uid$
    11. OIT supports only Apple, Intel (i386) hardware for Mac OS and software. Only unmodified iOS is supported.
    12. Please remember to check prices at to verify best price with NC State Marketplace
    13. Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request invitation by opening a help desk ticket at  Must login to GSX  monthly!!
    14. UNC Combined Pricing Initiative (CPI)
    15. JAMF Pro Enterprise service, and for details
    16. Endpoint Protection Standard Draft  
    17. Patching Standard
    18. Network Printer Security Standard
  1. Training Needs – 5 min
    1. OIT-Managing OS X with Jamf Pro – Request –
    2. OIT-Casper Best Practices for Packagers – Request –
    3. OIT-Advanced OS X Management with Jamf Pro – Request –
    4. CrashPlan for Sub-Org Administrators – Request –
    5. Local Based Commercial Training –
    6. JAMF Pro Training – 
  2. Service Updates- 10 min
    1. Jamf Pro – V 10.1.0 in Beta2 expect release mid-Jan 2018, JDS is frozen per Jamf. Speed Up outage Wed Dec 14, 2017, 1800-2345.
      Service Now Plugin for JAMF Pro and waiting on MID Server firewall config in SNow Dev.
    2. CrashPlan – Waiting on Code42 to approve move to non-appliance hosted with V6.5.x upgrade and SSO. We have a quote and looking at options. Will require a client reinstall and full backup.  Old 5.x servers will remain available until Cold Storage purges, ~ 1 year.
    3. NetInstall – nuke.nbi/sh is macOS 10.12.3. 10.11.2 set (nuke10112.nbi & sh). are still available if needed. 10.13.x is not working and is broken with gray screen error which Apple is aware via radar.
    4. AutoPKGR – Has issue with Jamf Pro v10 that requires manual PKG upload but working on this with Jamf and the original author.  JSS Importer 1.0 is out but has issue with JDS and all cloud DPs.
    5. Antivirus – New version has not come forth yet. Current: NCSU-Campus-System Center Endpoint Protection for macOS Installer.pkg at
    6. DEP/VPP/Apple School – Apple School Manager still waiting on Apple to move NCSU.
    7. Endpoint Protection – Renewed effort but no approved Standard
      Draft “BluePrint for macOS Endpoint Protection” (,  Also looking at creating Service Now “Endpoint Compliance” report for all points of the standard. 
  3. Endpoint Protection Standard Update – 30 min
    Update and discussion on Endpoint Protection standard and possible implementation strategies.
    Proposed controls are: Software Inventory, Antimalware/Antivirus, Authentication Required, Host-based Firewall, Least Privilege Access, Full Disk Encryption (with university key escrow) , File Integrity Monitoring, Encrypted Network Communication, Web Reputation Filtering, and  Application Control.  How many folks are already implementing some of the proposed endpoint controls?  Which ones?  How are they working? Is there push back from clients?    Discussion 
  4. Tech Short – Some methods to report on compliance – 30 min
    Here are some items in Jamf Pro which can be used on the dashboard to monitor compliance with OS Patching, Antivirus install, and Spiron install.   Discussion 
  5. New Apple Hardware – 15 min
    New rechargeable keyboard with number pad:
    iMac Pro  Discussion 
  6. Q&A – 15 min
    You ask we try to answer

Next meeting:
MacPolicy – Tue. Feb 13, 2018 in Room B16-B Hillsborough from 1:30-2:30 pm.
MacTech – Tue. Jan 9, 2017 in Room B16-B Hillsborough from 2:30-4:30 pm.
MacPolicy – 2nd Tuesday each quarter in Feb, May, Aug, Nov.
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacPolicy and MacTech will not meet in July.  
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.