MacTech 05112021

MacTech Groups Agenda
Tue, May 11, 2021
2:30 to 4:30 pm
meet.google.com/aie-ypji-pqd 

Announcements – 5 min 

OIT only supports macOS 10.14.6 or newer
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
macOS versions that shipped with Intel Hardware: support.apple.com/kb/HT1159
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity Macintosh MultiUser Workflow uses NoLoAD configuration with local home directory at /Users/$uid$
OIT supports only Apple, Intel (i386) hardware for Mac OS and software. Only unmodified iOS is supported.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request invitation by opening a help desk ticket at  help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf,  go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
JAMF Pro Cheat Sheet at go.ncsu.edu/jamfcheat for details on common configuration management tasks

Training – 5 min (any course available via Meet/Zoom upon request) 

OIT-Managing Apple Devices with Jamf Pro – TBA/Request
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro01-JPro01&deptName=OIT&instanceID=000006

OIT-Jamf Pro Best Practices for Packagers – TBA/Request
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro03-JPro03&deptName=OIT&instanceID=000005 

OIT-Advanced Apple Device  Management with Jamf Pro – TBA/Request
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro02-JPro02&deptName=OIT&instanceID=000005 

CrashPlan for Sub-Org Administrators – Request –  reporter.ncsu.edu/link/courseview?courseID=OIT-CPlan1-CPlan1&deptName=OIT 

Local Based Commercial Training – training.computertree.com/course/ 

JAMF Pro Training – www.jamf.com/training/ 

Service Updates – 30 min 

Configuration Management  – Jamf Pro production is 10.28.0, test on nccloudtest is 10.29.0(docs.jamf.com/10.29.0/jamf-pro/release-notes/What’s_New.html), and the no current beta.  Jamf Pro is the only approved Configuration Management system for macOS, iOS/iPadOS, and tvOS.  See oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/ 

Patch Definition Management –  Community Patch service is shutting down. https://bryson3gps.wordpress.com/2021/05/06/the-future-of-community-patch/
We have one patch set linked in nc.jamfcloud.com from BeatleMike. This patch server and the kinobi patch server will be removed on Wed June 30, 2021.  Please transition all your patch titles to the new Jamf Patch Titles before that date.

Backup for Endpoints – No changeThe Code42  production service is at version 8.6.0 Existing clients are automatically updated from the cloud server.  For NEW installs only the package in JAMF is “NCSU-Campus-Install Code42-860.pkg”. The “NCSU-Campus-Install Code42CrashPlan License and Config.pkg” is required in the policy as before for new installs. 

Internet Recovery –  https://support.apple.com/en-us/HT204904.
Also see: https://mrmacintosh.com/restore-macos-firmware-on-an-apple-silicon-mac-boot-to-dfu-mode/
Apple Silicon devices running macOS are more like iPads now and have several recovery options including:
macOS Recovery
System Recovery – Will boot automatically if macOS Recovery is unavailable
macOS Big Sur USB Installer Drive – External boot for macOS Installers is enabled by default on ASi
Apple Configurator 2 REVIVE – reinstalls macOS Recovery retaining user data on the drive
Apple Configurator 2 RESTORE – reinstalls macOS Recovery, ERASES drive!! and reinstalls macOS

Software Packaging – autopkg should now be working 99%  of the time using the new jamf-upload processor which is more reliable than JSSImporter.  Still seeing some issues with the launchd but working to fix those.

AntiMalware – No change.  DetectX Swift (intel) is still available and should be installed see oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/   

Sensitive Data Discovery – Use the Jamf Pro package NCSU-Campus-Uninstall_Spirion.pkg to remove both Spirion and older Identity Finder. Still have 210 NCSU macOS devices that have updated inventory in the last 30 days with Spiron installed…. Please remove. NCSU-ATH 2, NCSU-BME 5, NCSU-CALS 3, NCSU-CED 7, NCSU-CHASS 11, NCSU-CNR 0, NCSU-COE 4, NCSU-COE-CSC 3, NCSU-COE-ECE 0, NCSU-COE-ISE 7, NCSU-COE-MAE 1, NCSU-COE-SCI 0, NCSU-COS 19, NCSU-CVM 2, NCSU-DASA 3, NCSU-DELTA 1, NCSU-EIT 12, NCSU-FI 7, NCSU-LIB 48, NCSU-MCK 1, NCSU-OIT-MD 54, NCSU-PCOM 2, NCSU-SSCL 14, NCSU-TEX 1  See: https://docs.google.com/spreadsheets/d/1ukbty46sglCtJe-eQrdLKe2ixUOty0OvqXsHw5y1u3E

Apple School Manager – No change. REMINDER Make sure you *unassign* any devices you have sent to surplus.

AppleCare for Enterprise – New information just came out about all AppleCare programs  on April 30, 2021. More later in this meeting.

Endpoint Protection Standard – Phase 2 deadline- Was Dec 31, 2020.
See Jamf Pro Cheat Sheet at:  go.ncsu.edu/jamfcheat  

— 

Reminder about Patching– 1 min
Just a word about patching. There have been several security updates recently so remember to check all your devices including AppleTV’s to make sure they are patched.
While the patch standard does give 180 days for most devices this is a good time to consider patching early.

New Apple Hardware – 45 min
Dave Andersenwill join us to present the new Apple Hardware recently announced. Discussion

  • Pad Pro 11″ & 12.9″
  • iMac 24” M1
  • Apple TV 4K
  • AirTag
  • Purple iPhone – it’s purple

Apple Care Changes in MarketPlace – 10 min
With the new AppleCare changes we now have 4 different choices in MarketPlace. 
3-Year AppleCare+ for Schools
4-Year AppleCare+ for Schools
3-Year AppleCare+ for Schools (no fees)
4-Year AppleCare+ for Schools (no fees)
Besides the length of coverage and price the difference is the charge for a limited number of non-defect service incidents ( like accidental screen breakage or liquid damage to motherboards, etc).
Discussion.

AppleCare of Enterprise Updates – 5 min
OIT is evaluating the newly announced T&C’s of the license now.  It appears we may be able to get ACE added to the Marketplace but need time to work out the details.  We may need a small, coordinated bulk buy to get the program started (200 of any device cumulative).  More details to come.

Discussion.

Adobe Updates – 5 min
Adobe is now REQUIRING separate installer packages for intel64 and arm64 on macOS.  We have filed a support call and have been told there are no universal installers.  We escalated the call thru Adobe Enterprise into Engineering and pointed out the burden on us along with the question on why all other vendors can do it but Adobe won’t. We are waiting to hear back.  However, Adobe Acrobat Pro DC and Adobe Acrobat Reader DC version 21.001.20145 will install and run on both architectures under Rosetta2 in most cases.   Discussion 

Q&A – 15 min
You ask we try to answer 

Next meeting: 

MacTech – Tue. June 8, 2021  Virtual via Google Meet.
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.