MacTech 10092018

MacTech Groups Agenda
Tuesday, Oct 9, 2018
2:30 to 4:30 pm
Room B16-B Hillsborough Bld.


Announcements – 5 min

  1. OIT only supports OS X 10.11.6 and macOS 10.13.x or newer
  2. Status page for services see
  3. OIT Macintosh Support Web Site for updates.
  4. Slack group #macintosh
  5. Apple Sales: Paul & Sys Eng: Dave
  6. macOS versions that shipped with Intel Hardware:
  7. Vintage and Obsolete Apple Products:
  8. Apple Education Support Line 800-800-2775 use this number only. Always verify Apple Care Coverage.
  9. Antivirus for university owned devices –
  10. Unity Macintosh Workflow uses Active Directory configuration with local home directory at /Users/$uid$
  11. OIT supports only Apple, Intel (i386) hardware for Mac OS and software. Only unmodified iOS is supported.
  12. Please remember to check prices at to verify best price with NC State Marketplace
  13. Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request invitation by opening a help desk ticket at Must login to GSX monthly!!
  14. UNC Combined Pricing Initiative (CPI)
  15. JAMF Pro Enterprise service, and for details
  16. JNUC 2018 – Oct 23-25 Everette will attend. Joey J will present (1:30 Oct 24,


Training Needs – 5 min

OIT-iOS Mobile Security  – Oct 17, 2018
OIT-Managing OS X with Jamf Pro – Request
OIT-Jamf Pro Best Practices for Packagers – Nov 29, 2018 –
OIT-Advanced OS X Management with Jamf Pro – Oct 16, 2018
CrashPlan for Sub-Org Administrators – Request –
Local Based Commercial Training –
JAMF Pro Training –


Service Updates – 10 min

Jamf Pro – V 10.7.21 running in production running 10.7.1 for testing PLEASE TEST!
Following up on 2 issues with JAMF in next few weeks 1) Policy listing slowness (normal and patch) and 2) Sync to local FSDP

Service Now Discovery Plugin for JAMF Pro still working on sync issues with only NCSU sites.

CommunityPatch server is changing to 2.x version and patches will be per creator not all on server

CrashPlan – running 6.5.2 in production.  Changing to fully hosted model with SSO over next year but still working on plan.  Will require a new full backup and a new client install (not automatic).

Internet Recovery – Command-Option-R to install latest version for hardware or Command-R to install currently installed version. Have been seeing issues when 10.14 was released with failures on Command-Option-R.

AutoPKGR – Beta support for JCDS is on github. Waiting for release to implement

AntiMalware/Virus – MSSCEP is available for university owned macOS devices.
NCSU-Campus-MSSCEP-Mac_4.5.32.0.pkg   —

Sensitive Data Discovery – NCSU-Campus-SpirionIdentityFinder1054.pkg
OIT Security and Compliance would like for this to be installed on All managed devices as soon as possible.

Apple School Manager – All VPP and MDM are handled in ASM with managed Apple Id’s of from <unityid>


macOS AD Auth Issues – 5 min

OIT is STILL working with Apple and Microsoft to try and figure out why many macs bound to WOLFTECH fail to authenticate intermittently.  Thanks to all the folks on NC State IT #ad-auth who have done diagnostics and presented logs. The current work-around is to reboot at every logout.


Kaspersky Removal – 5 min

No university owned (or private) devices at NCSU should be running any version of Kaspersky now.  Please verify that all your devices are Kaspersky Free! See this report:

Spirion Installation -5 min

All university owned devices should have Spirion Identity Finder installed.  Here is a sheet of machines that do not appear to have the app on their boot devices:
Please verify.


Jamf Policy Slowness – 10 min

We have discovered a product issue with Jamf Pro 10.x series where it tries to search all policies including the on-off, throwaway policies created by Jamf Recon.  Please avoid Recon due to these issues and the fact that it requires ssh ports to be open. Discussion


macOS 10.14 Mojave issues – 30 min

We have reports of issues with macOS 10.14 and Crashplan 6.5.x.  Does anyone see the issue?
Several folks report having to physically be at the console to approve ARD access on new/reformated devices.
Don’t forget that User Approved MDM is in effect with 10.14 pre-approved Kernel Extensions must be setup to avoid the end user seeing approval dialogs.
What other issues are folks seeing?

Endpoint Protection Service Team Update – 10 min

The EPS service team had it’s first meeting today.  We discussed process, reviewed some feedback, and talked about implementation, documentation, and risk issues that


Q&A – 15 min

You ask we try to answer


Next meeting:

MacPolicy – Tue. Nov 13, 2018 in Room B16-B Hillsborough from 1:30-2:30 pm.
MacTech – Tue. Nov 13, 2018 in Room B16-B Hillsborough from 2:30-4:30 pm.
MacPolicy – 2nd Tuesday each quarter in Feb, May, Sep, Nov.
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Sep, Oct, Nov, Dec
MacPolicy and MacTech do not meet in July or August.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.