MacTech 10132020

MacTech Groups Agenda
Tue, Oct 13, 2020
3:00 to 5:00 pm
meet.google.com/aie-ypji-pqd 

Announcements – 5 min

OIT only supports macOS 10.14.6 or newer
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
macOS versions that shipped with Intel Hardware: support.apple.com/kb/HT1159
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Apple Care Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity Macintosh MultiUser Workflow uses NoLoAD configuration with local home directory at /Users/$uid$
OIT supports only Apple, Intel (i386) hardware for Mac OS and software. Only unmodified iOS is supported.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request invitation by opening a help desk ticket at  help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf,  go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
UNC CAUSE 2020 is still going on and sessions are available at 2020unccause.sched.com

 

Training – 5 min (any course available via Meet/Zoom upon request)

OIT-iOS Mobile Device Security  – TBA reporter.ncsu.edu/link/courseview?courseID=OIT-iOSMob-Security&deptName=OIT

OIT-Managing Apple Devices with Jamf Pro – Request –  reporter.ncsu.edu/link/courseview?courseID=OIT-JPro01-JPro01&deptName=OIT

OIT-Jamf Pro Best Practices for Packagers – Request –  reporter.ncsu.edu/link/courseview?courseID=OIT-JPro03-JPro03&deptName=OIT

OIT-Advanced Apple Device  Management with Jamf Pro – Request reporter.ncsu.edu/link/courseview?courseID=OIT-JPro02-JPro02&deptName=OIT

CrashPlan for Sub-Org Administrators – Request –  reporter.ncsu.edu/link/courseview?courseID=OIT-CPlan1-CPlan1&deptName=OIT

Local Based Commercial Training – training.computertree.com/course/

JAMF Pro Training – www.jamf.com/training/

Service Updates – 30 min

Configuration Management  – Jamf Pro production is 10.23.0 Jamf Pro 10.24.2 in test on nccloudtest.jamfcloud.com and will be upgraded to 10.25.0 on Oct 24, 2020 Jamf Pro 10.25b2 is the latest beta.
The USWCA Team is ready to test 10.25.0 and will likely skip 10.24.1.  See the release notes for 10.25.0 at docs.jamf.com/10.25.0/jamf-pro/release-notes/What’s_New.html
Jamf Pro is the only approved Configuration Management system for macOS, iOS/iPadOS, and tvOS.  See oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/

Patch Definition Management – Kinobi was purchased by JAMF Software.  No change to our service this year.

Backup for Endpoints – The Code42  production service is at version 8.2.2.  Some time between Oct 15 and Oct 30 Code42 will automatically be updated to version 8.5.0.  See the release notes at https://support.code42.com/Release_Notes/Code42_app_version_8.5_release_notes
Existing clients should automatically update from the cloud service.  Clients with version 7 will not upgrade but will continue to work.  We have no control over this upgrade schedule. An updated installer for brand new, clean installs will be made available in Jamf Pro before Nov 1, 2020. The “NCSU-Campus-Install Code42CrashPlan License and Config.pkg” is still required in the policy as before for new installs.

Internet Recovery – No change. https://support.apple.com/en-us/HT204904.  NOTE: Internet Recovery as it exists today will not work with Apple Silicon devices and Apple Configurator may be required for a full nuke and pave in some cases.

Software Packaging – No change or update.  Still seeing issues with package uploads from autopkg and having to fix manually.

AntiMalware – DetectX Swift is still available and should be installed see oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/   OIT AV internal team met Sep 18, 2020 but no changes were proposed or approved.  There was general agreement that OIT wants to move towards best of breed protection for each type of device and not a single product.    Unrelated, also note that Jamf has reduced the educational price of Jamf Protect to $12 per device per year with a minimum order of 25 seats of the System Office Jamf contract.  For folks that might want additional information about Apple builtin  antimalware software like GateKeeper, MRT, and Xprotect take a look at the silnite command line tool  https://eclecticlight.co/lockrattler-systhist/

Sensitive Data Discovery – NCSU-Campus-Spirion10800.pkg still waiting for approval of 11.4.

Apple School Manager – There have been significant changes to the ASM interface. REMINDER: For device management ALWAYS use Edit Device Management and NOTHING ELSE!!  See agenda item below.  Apple has also enabled SSO and SCIM support for AZURE AD in this release.  We are limited right now because the Apple Developer program has not updated to use Apple’s own, new login services so we can not move (GSX has) yet.

AppleCare for Enterprise – Still on hold pending Apple being able to add to MarketPlace.

Endpoint Protection Standard – Phase 2 deadline-Dec 31, 2020.
See Jamf Pro Cheat Sheet at:  go.ncsu.edu/jamfcheat

Changes to Apple School Manager – 15 min

Apple School Manager has a UI change which requires first searching for a device before using “Edit Device Management” to assign it to an MDM server.  To “Unassign” a device one now has to set the MDM server to “None” at the very bottom of the pop-up list.  Please pay attention to the number of devices you are operating  on as you should never operate on thousands of devices!!  As a reminder, you should always use ONLY  “Edit Device Management” and nothing else.  Demo and discussion.

Apple Updates and Releases – 30 min
Apple new hardware and software releases.
Discussion

Q&A – 15 min
You ask we try to answer

Next meeting:

MacTech – Tue. Nov 10, 2020  Virtual via Google Meet.
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.