Mac Tech

MacTech 12122017

By ega

MacTech Groups Agenda
Tuesday, Dec 12, 2017
2:30 to 4:30 — Room B16-B Hillsborough Bld.

 

  • Announcements – 5 min

 

    1. OIT only supports OS X 10.11.6 and macOS 10.13.2 or newer
    2. Status page for jamfcloud.com services see http://status.jamfsoftware.com
    3. OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
    4. Slack group ncstateit.slack.com #macintosh
    5. Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Anderson-andersen1@apple.com
    6. macOS versions that shipped with Intel Hardware: support.apple.com/kb/HT1159
    7. Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752?viewlocale=en_US
    8. Apple Education Support Line 800-800-2775 use this number only. Always verify Apple Care Coverage.
    9. Antivirus for university owned devices – go.ncsu.edu/antivirus
    10. Unity Macintosh Workflow uses Active Directory configuration with local home directory at /Users/$uid$
    11. OIT supports only Apple, Intel (i386) hardware for Mac OS and software. Only unmodified iOS is supported.
    12. Please remember to check prices at www.apple.com/education/pricelists/ to verify best price with NC State Marketplace
    13. Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request invitation by opening a help desk ticket at  help@ncsu.edu  Must login to GSX  monthly!!
    14. UNC Combined Pricing Initiative (CPI) oit.ncsu.edu/campus-it/it-purchasing/unc-combined-pricing-initiative-cpi-program-at-nc-state/
    15. JAMF Pro Enterprise service go.ncsu.edu/jamf,  go.ncsu.edu/casperinfo and go.ncsu.edu/uwc for details
    16. Endpoint Protection Standard Draft https://docs.google.com/a/ncsu.edu/document/d/1z1ZQm8HrEX27xjImjQtLPAZ15N1mfGjvsjHH1HTGLcM/edit?usp=sharing  
    17. Patching Standard https://policies.ncsu.edu/rule/rul-08-00-14/
    18. Network Printer Security Standard https://policies.ncsu.edu/rule/rul-08-00-13/
  2. Training Needs – 5 min
    1. OIT-Managing OS X with Jamf Pro – Request –
      reporter.ncsu.edu/link/courseview?courseID=OIT-JPro01-JPro01&deptName=OIT
    2. OIT-Casper Best Practices for Packagers – Request – webapps.ncsu.edu/classmate/workshop/index/details/workshopId/351
    3. OIT-Advanced OS X Management with Jamf Pro – Request – webapps.ncsu.edu/classmate/workshop/index/details/workshopId/881
    4. CrashPlan for Sub-Org Administrators – Request – reporter.ncsu.edu/link/courseview?courseID=OIT-CPlan1-CPlan1&deptName=OIT
    5. Local Based Commercial Training – training.computertree.com/course/
    6. JAMF Pro Training – www.jamf.com/training/ 
  3. Service Updates- 10 min
    1. Jamf Pro – V 10.1.0 in Beta2 expect release mid-Jan 2018, JDS is frozen per Jamf. Speed Up outage Wed Dec 14, 2017, 1800-2345.
      Service Now Plugin for JAMF Pro and waiting on MID Server firewall config in SNow Dev.
    2. CrashPlan – Waiting on Code42 to approve move to non-appliance hosted with V6.5.x upgrade and SSO. We have a quote and looking at options. Will require a client reinstall and full backup.  Old 5.x servers will remain available until Cold Storage purges, ~ 1 year.
    3. NetInstall – nuke.nbi/sh is macOS 10.12.3. 10.11.2 set (nuke10112.nbi & sh). are still available if needed. 10.13.x is not working and is broken with gray screen error which Apple is aware via radar.
    4. AutoPKGR – Has issue with Jamf Pro v10 that requires manual PKG upload but working on this with Jamf and the original author.  JSS Importer 1.0 is out but has issue with JDS and all cloud DPs.
    5. Antivirus – New version has not come forth yet. Current: NCSU-Campus-System Center Endpoint Protection for macOS Installer.pkg at nc.jamfcloud.com/packages.html?id=3853
    6. DEP/VPP/Apple School – Apple School Manager still waiting on Apple to move NCSU.
    7. Endpoint Protection – Renewed effort but no approved Standard
      Draft “BluePrint for macOS Endpoint Protection” (https://docs.google.com/document/d/1Pdv8Z3aU374i1cNwvvrEd3yRnmeU2qXRolpYwP8jaUs/edit),  Also looking at creating Service Now “Endpoint Compliance” report for all points of the standard. 
  4. Endpoint Protection Standard Update – 30 min
    Update and discussion on Endpoint Protection standard and possible implementation strategies.
    Proposed controls are: Software Inventory, Antimalware/Antivirus, Authentication Required, Host-based Firewall, Least Privilege Access, Full Disk Encryption (with university key escrow) , File Integrity Monitoring, Encrypted Network Communication, Web Reputation Filtering, and  Application Control.  How many folks are already implementing some of the proposed endpoint controls?  Which ones?  How are they working? Is there push back from clients?    Discussion 
  5. Tech Short – Some methods to report on compliance – 30 min
    Here are some items in Jamf Pro which can be used on the dashboard to monitor compliance with OS Patching, Antivirus install, and Spiron install.   Discussion 
  6. New Apple Hardware – 15 min
    New rechargeable keyboard with number pad:
    /www.apple.com/shop/product/MQ052LL/A/magic-keyboard-with-numeric-keypad-us-english  
    iMac Pro https://www.apple.com/imac-pro/specs/  Discussion 
  7. Q&A – 15 min
    You ask we try to answer

Next meeting:
MacPolicy – Tue. Feb 13, 2018 in Room B16-B Hillsborough from 1:30-2:30 pm.
MacTech – Tue. Jan 9, 2017 in Room B16-B Hillsborough from 2:30-4:30 pm.
MacPolicy – 2nd Tuesday each quarter in Feb, May, Aug, Nov.
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacPolicy and MacTech will not meet in July.  
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.