MacTech Groups Agenda
Tue, Mar 9, 2021
2:30 to 4:30 pm
meet.google.com/aie-ypji-pqd
Announcements – 5 min
OIT only supports macOS 10.14.6 or newer
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
macOS versions that shipped with Intel Hardware: support.apple.com/kb/HT1159
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity Macintosh MultiUser Workflow uses NoLoAD configuration with local home directory at /Users/$uid$
OIT supports only Apple, Intel (i386) hardware for Mac OS and software. Only unmodified iOS is supported.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request invitation by opening a help desk ticket at help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf, go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
JAMF Pro Cheat Sheet at go.ncsu.edu/jamfcheat for details on common configuration management tasks
Training – 5 min (any course available via Meet/Zoom upon request)
OIT-iOS Mobile Device Security – TBA reporter.ncsu.edu/link/courseview?courseID=OIT-iOSMob-Security&deptName=OIT
OIT-Managing Apple Devices with Jamf Pro – TBA
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro01-JPro01&deptName=OIT&instanceID=000006
OIT-Jamf Pro Best Practices for Packagers – Mar 11, 2021 – 1:30-4:30 pm
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro03-JPro03&deptName=OIT&instanceID=000005
OIT-Advanced Apple Device Management with Jamf Pro – Apr 8, 2021 – 1:30 -4:30 pm
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro02-JPro02&deptName=OIT&instanceID=000005
CrashPlan for Sub-Org Administrators – Request – reporter.ncsu.edu/link/courseview?courseID=OIT-CPlan1-CPlan1&deptName=OIT
Local Based Commercial Training – training.computertree.com/course/
JAMF Pro Training – www.jamf.com/training/
Service Updates – 30 min
Configuration Management – Jamf Pro production is 10.26.0, test on nccloudtest is 10.27.0, and the current beta is 10.28B2. Jamf Pro is the only approved Configuration Management system for macOS, iOS/iPadOS, and tvOS. See oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/
Patch Definition Management – Jamf has notified us that changes to patch titles are coming see https://docs.jamf.com/10.27.0/jamf-pro/release-notes/Deprecations_and_Removals.html.
Backup for Endpoints – Code42 has announced that they will be updating the client only via the cloud service some time between March 15 and March 30, 2021. Existing clients will be automatically updated from the cloud server. Release notes are at: https://support.code42.com/Release_Notes/Code42_app_version_8.6_release_notes. Currently for New installs only the package in JAMF is “NCSU-Campus-Install Code42-850.pkg”. The “NCSU-Campus-Install Code42CrashPlan License and Config.pkg” is required in the policy as before for new installs. The existing New Only installers will be updated to 8.6.0 when Code42 makes the packages available.
Internet Recovery – https://support.apple.com/en-us/HT204904.
Also see: https://mrmacintosh.com/restore-macos-firmware-on-an-apple-silicon-mac-boot-to-dfu-mode/
Apple Silicon devices running macOS are more like iPads now and have several recovery options including:
macOS Recovery
System Recovery – Will boot automatically if macOS Recovery is unavailable
macOS Big Sur USB Installer Drive – External boot for macOS Installers is enabled by default on ASi
Apple Configurator 2 REVIVE – reinstalls macOS Recovery retaining user data on the drive
Apple Configurator 2 RESTORE – reinstalls macOS Recovery, ERASES drive!! and reinstalls macOS
Software Packaging – No change. Still having to fix update failures manually. Most recipes have not been updated to pull installers for Universal versions yet. Many recipes are still restricting installation on macOS 11. If you encounter one of these file an issue with the recipe author.
AntiMalware – No change. DetectX Swift (intel) is still available and should be installed see oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/
Sensitive Data Discovery – OIT S&C requested we remove the product ASAP if you have not alread. Use the Jamf Pro package NCSU-Campus-Uninstall_Spirion.pkg to remove both Spirion and older Identity Finder.
Apple School Manager – No change. REMINDER: For device management ALWAYS use Edit Device Management and NOTHING ELSE!! Also please make sure you *unassign* any devices you have sent to surplus.
AppleCare for Enterprise – Still on hold pending Apple being able to add to MarketPlace.
Endpoint Protection Standard – Phase 2 deadline- Was Dec 31, 2020.
See Jamf Pro Cheat Sheet at: go.ncsu.edu/jamfcheat
—
Apple Silicon- Forgotten Passwords and Activation – 5 min
OIT has encountered an issue recovering from lost passwords on Apple Silicon devices. When using recovery mode (hold down power key) and running the resetpassword command line tool (Utilities menu> Terminal) a few things happen:
- Resetting a password requires knowing a password from another account on the device if it exists
- If no passwords are known the device must be deactivated and ALL accounts on the device MUST be reset before continuing.
- If the device fails to be activated again then the device must be reformatted and all data destroyed before it can be used again!!
Discussion
Skipping Jamf Pro 10.27 – 10 min
We will skip the upgrade of nc.jamfclould.com to version 10.27.0 due to issues with changes in Self Service.app where categories are known to disappear and re-appear at random and a few other changes that appear to be fixed in the next betas. Discussion.
Adobe update disaster – 10 min
We have been having mixed results getting new versions of Adobe update installers to work on both Intel and ASi devices. The best summary of the current state of Adobe for ASi is at :
https://dazwallace.wordpress.com/2021/02/06/deploy-adobe-applications-to-apple-silicon-devices/
Be aware that all current Adobe Products require Rosetta2 to run under ASi and none of the current installers in Jamf Pro will install on ASi.
The recent patch to Adobe Acrobat is failing about 50% of the time on Intel with the error:
./preinstall: CCP Package Installer : Exit code of AdobeDeploymentManager is (79)
OIT is working on getting a fix for these issues and have an open issue Case ID: E-000332963 with Adobe and await response. If end users have admin access and can update directly from Adobe using the Adobe CC Desktop app they should do so for Acrobat Pro and Reader as soon as possible.
Discussion.
Apple OS updates with security fixes arrive – 10 min
Apple has released macOS 11.2.3, iOS/iPadOS 14.4.1, and watchOS 7.3.2 with several security fixes which should be applied. There is no CVE but Apple says all updates address an issue where “Processing maliciously crafted web content may lead to arbitrary code execution”. Discussion.
Q&A – 15 min
You ask we try to answer
Next meeting:
MacTech – Tue. Apr 13, 2021 Virtual via Google Meet.
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.