MacTech Groups Agenda
Tuesday, Mar 10, 2020
3:00 to 5:00 pm
B16-B Hillsborough Bld.
Announcements – 5 min
OIT only supports macOS 10.13.6 or newer
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
macOS versions that shipped with Intel Hardware: support.apple.com/kb/HT1159
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Apple Care Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity Macintosh MultiUser Workflow uses NoLoAD configuration with local home directory at /Users/$uid$
OIT supports only Apple, Intel (i386) hardware for Mac OS and software. Only unmodified iOS is supported.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request invitation by opening a help desk ticket at help@ncsu.edu Must login to GSX monthly!!
UNC Combined Pricing Initiative (CPI) oit.ncsu.edu/campus-it/it-purchasing/unc-combined-pricing-initiative-cpi-program-at-nc-state/
JAMF Pro Enterprise service go.ncsu.edu/jamf, go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
Jamf Pro maintenance – “Jamf Cloud infrastructure maintenance on Saturday, March 14, 2020 from 1100 to 1400 ET. This is a scheduled performance optimization. Your Jamf Pro cloud instance will remain available and function normally during this scheduled maintenance; however, you may be logged out of your instance as the maintenance completes, which could cause you to lose unsaved work.”
Training – 5 min
OIT-iOS Mobile Device Security – TBA
reporter.ncsu.edu/link/courseview?courseID=OIT-iOSMob-Security&deptName=OIT
OIT-Managing Apple Devices with Jamf Pro – TBA –
reporter.ncsu.edu/link/courseview?courseID=OIT-JPro01-JPro01&deptName=OIT
OIT-Jamf Pro Best Practices for Packagers – TBA –
reporter.ncsu.edu/link/courseview?courseID=OIT-JPro03-JPro03&deptName=OIT
OIT-Advanced Apple Device Management with Jamf Pro – Apr 7, 2020
reporter.ncsu.edu/link/courseview?courseID=OIT-JPro02-JPro02&deptName=OIT
CrashPlan for Sub-Org Administrators – Request –
reporter.ncsu.edu/link/courseview?courseID=OIT-CPlan1-CPlan1&deptName=OIT
Local Based Commercial Training – training.computertree.com/course/
JAMF Pro Training – www.jamf.com/training/
Service Updates – 30 min
Configuration Management – Jamf Pro production moves to 10.19.0 Wed Mar 18 after 1830. (https://docs.jamf.com/10.19.0/jamf-pro/release-notes/What’s_New.html)
Jamf Pro 10.19.0 in test on nccloudtest.jamfcloud.com. Jamf Pro 10.20b2 is latest beta.
Move of nc.jamfcloud.com to Jamf Cloud Premium Hosting Feb 26, 2020 was successful.
The UNC-SO Template contract is up end of April and will be renegotiated at SO. Expect an increase in price which could be up to $2.00 per seat (it looks like OIT will still pay for campus).
Jamf Pro is the only approved Configuration Management system for macOS, iOS/iPadOS, and tvOS. See https://oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/
Patch Definition Management – OIT has purchased Kinobi Standard Hosted patch definition service(kinobi.io) for 1 year. We are waiting for our access token and then will add the patch definition service to nc.jamfcloud.com we expect by 03162020.
CrashPlan – Production service is at version 7.7.0. Have support call in with Code42 about macOS 10.12.x clients that are new installs (or full remove/reinstalls) not connecting to 7.7 cloud server. We are being told that the next server update will allow us to move away from the ldap sync middleware we use now.
Internet Recovery – https://support.apple.com/en-us/HT204904 Command-Option-R to install latest version for hardware or Command-R to install currently installed version.
Software Packaging –The Spirion server upgrade is complete. Working on packaging version 11 client which is 64 bit clean and works with macOS 10.15+ (vendor is only 6 months late).
AntiMalware – DetectX Swift is still available and should be installed see oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/ Still no meeting of the OIT AV Steering teams scheduled. No edu pricing on Jamf Protect yet as UNC-SO and Jamf still working on template contract. Some discussion within OIT about Crowd Strike Falcon (currently used on VMs) but no funding identified.
Sensitive Data Discovery – NCSU-Campus-Spirion10800.pkg
https://nc.jamfcloud.com/packages.html?id=6679
Apple School Manager – No changes or updates.
AppleCare for Enterprise – Still on hold pending Apple being able to add to MarketPlace. It appears that Apple is working on a template contract with UNC-SO to provide leasing and leased devices MAY be bundled with AppleCare for Enterprise but we have not seen the contracts yet.
Endpoint Protection Standard – Phase 2 deadline is Dec 31, 2020. See Jamf Pro Cheat Sheet at:
oit.ncsu.edu/help-support/apple/jamf-pro/jamf-pro-policy-cheat-sheet/
Discussion
—
New Jamf Pro Cheat Sheet entries – 20 min
OIT has updated the Jamf Pro Cheat Sheet to include Printer Setup and adding certificates that can be used by Cisco Jabber. Note that printer setup post-10.15 should be done with configuration profiles and that macOS in a future version will only support ipp/ipps for network printing (ie custom print drivers will not be allowed).
oit.ncsu.edu/help-support/apple/jamf-pro/jamf-pro-policy-cheat-sheet/
Discussion
Legacy AD logins for 10.15+ without binding or NoLoAD – 10 min
Look at setting up Prestage and profiles in Jamf Pro for macOS 10.15.0+ that configures devices to require login from Legacy AD (Wolftech) at the setup assistant, sets the local account name and full name from LDAP lookup, locks information so can not be changed and then syncs the password with LDAP directory using Apple Kerberos SSO profile payload. This requires no binding, no installation of NoLoAD or Nomad.app.
Discussion
Futures for Apple devices and releases- 15 min
Everette will talk about rumors of product releases and Apple news. If you have a favorite rumor bring it.
Will there be a WWDC 2020? What are Apple Tags? Will we get a new Apple device? Management Profiles for watchOS? More.
Discussion
Q&A – 15 min
You ask we try to answer
Next meeting:
MacTech – Tue. Mar Apr 14, 2020 in Room B16-B Hillsborough from 2:30-4:30 pm.
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech dos not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.