MacTech 06082021

MacTech Groups Agenda
Tue, June 8, 2021
2:30 to 4:30 pm
meet.google.com/aie-ypji-pqd 

Announcements – 5 min 

OIT only supports macOS 10.14.6 or newer
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
macOS versions that shipped with Intel Hardware: support.apple.com/kb/HT1159
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity Macintosh MultiUser Workflow uses NoLoAD configuration with local home directory at /Users/$uid$
OIT supports only Apple branded Intel (i386) and Apple Silicon(arm64) hardware for macOS and software. Only unmodified iOS/iPadOS/tvOS is supported.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request an invitation by opening a help desk ticket at  help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf,  go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
JAMF Pro Cheat Sheet at go.ncsu.edu/jamfcheat for details on common configuration management tasks

Training – 5 min (any course available via Meet/Zoom upon request) 

OIT-Managing Apple Devices with Jamf Pro – TBA/Request
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro01-JPro01&deptName=OIT&instanceID=000006

OIT-Jamf Pro Best Practices for Packagers – TBA/Request
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro03-JPro03&deptName=OIT&instanceID=000005 

OIT-Advanced Apple Device  Management with Jamf Pro – TBA/Request
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro02-JPro02&deptName=OIT&instanceID=000005 

CrashPlan for Sub-Org Administrators – Request –  reporter.ncsu.edu/link/courseview?courseID=OIT-CPlan1-CPlan1&deptName=OIT 

Local Based Commercial Training – training.computertree.com/course/ 

JAMF Pro Training – www.jamf.com/training/ 

Service Updates – 30 min 

Configuration Management  -The production service on nc.jamfcloud.com will be updated to 10.29.2 on Wed June 9, 2021 between 1800 and 2345. Jamf Pro production is currently 10.28.0, test on nccloudtest is 10.29.2, and the current beta is 10.30B2.  Jamf Pro is the only approved Configuration Management system for macOS, iOS/iPadOS, and tvOS.  See oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/ 

Patch Definition Management – Community Patch service is shutting down. https://bryson3gps.wordpress.com/2021/05/06/the-future-of-community-patch/
We have one patch set linked in nc.jamfcloud.com from BeatleMike.
REMINDER: The Community Patch patch server and the kinobi patch server configurationswill be removed on Wed June 30, 2021.  Please transition all your patch titles to the new Jamf Patch Titles before that date.

Backup for Endpoints – No changeThe Code42  production service is at version 8.6.0 Existing clients are automatically updated from the cloud server.  For NEW installs only the package in JAMF is “NCSU-Campus-Install Code42-860.pkg”. The “NCSU-Campus-Install Code42CrashPlan License and Config.pkg” is required in the policy as before for new installs. 
NOTE: There may be new I2 contacts coming that changes the product bundling but no details yet.

Internet Recovery – https://support.apple.com/en-us/HT204904.
Also see: https://mrmacintosh.com/restore-macos-firmware-on-an-apple-silicon-mac-boot-to-dfu-mode/
Apple Silicon devices running macOS are more like iPads now and have several recovery options including:
macOS Recovery
System Recovery – Will boot automatically if macOS Recovery is unavailable
macOS Big Sur USB Installer Drive – External boot for macOS Installers is enabled by default on ASi
Apple Configurator 2 REVIVE – reinstalls macOS Recovery retaining user data on the drive
Apple Configurator 2 RESTORE – reinstalls macOS Recovery, ERASES drive!! and reinstalls macOS

Software Packaging – autopkg should now be working 99%  of the time using the new jamf-upload processor which is more reliable than JSSImporter.  Still fighting issues with the launchd.

AntiMalware – No change.  DetectX Swift (intel) is still available and should be installed see oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/   

Sensitive Data Discovery – Use the Jamf Pro package NCSU-Campus-Uninstall_Spirion.pkg to remove both Spirion and older Identity Finder. Still have 153 NCSU macOS devices that have updated inventory in the last 30 days with Spiron installed…. Please remove. NCSU-ATH 2, NCSU-BME 4, NCSU-CALS 1, NCSU-CED 4, NCSU-CHASS 7, NCSU-COE 3, NCSU-COE-CSC 1, NCSU-COE-ISE 8, NCSU-COE-MAE 1, NCSU-COS 14, NCSU-CVM 4, NCSU-DASA 3, NCSU-EIT 4, NCSU-FI 8, NCSU-LIB 37, NCSU-MCK 1, NCSU-OIT-MD 31, NCSU-PCOM 2, NCSU-SSCL 13, NCSU-TEX 1  See: https://docs.google.com/spreadsheets/d/1ukbty46sglCtJe-eQrdLKe2ixUOty0OvqXsHw5y1u3E

Apple School Manager – No change. REMINDER Make sure you *unassign* any devices you have sent to surplus.

AppleCare for Enterprise – See below.

Endpoint Protection Standard  – Phase 2 deadline- Was Dec 31, 2020.
See Jamf Pro Cheat Sheet at:  go.ncsu.edu/jamfcheat  

— 

WWDC 2021 Keynote Recap – 15 min
Quick recap of WWDC Keynote and what it means for us.  Discussion

AppleCare of Enterprise Updates – 45 min
OIT has started the enrollment of  the university in Apple Care for Enterprise(ACE).  To complete the enrollment process the university must purchase 200 or more devices with ACE.  To get this program going 2 things are needed 1) to choose if we want Tier 1 or Tier 1+ of the program  and 2 ) make the actual order of the ACE licenses.  To make the Tier choice MacTech will discuss the differences today and then take an email vote on June 9, 2021.  For the ACE order, purchasing has said that we are too close to the end of the year to make the purchase now.  Orders will have to be handled like the bulk buys used to be by having ACE added on by Apple  to a quote produced in Market Place. This process will start July 12, 2021 and run until we have met the 200 license number needed for enrollment(new devices will ship as available and not wait for the number to be reached).  AFTER the enrollment is complete, Apple will work to add ACE to Market Place. 

What does ACE provide:
https://www.apple.com/support/professional/enterprise/

  • All defect repair benefits provided by Apple Care + for Schools 
  • 2-day, On Site Repair Service
  • 24/7 End User Help Desk Support for covered devices
  • Direct access to AppleCare Help Desk Support including unlimited telephone technical support for hardware and software diagnosis and troubleshooting and issue isolation for Apple-based solutions
  • One (1) university level support issue (integration, network, etc) per year
  • Replacement of upto 4% of Macs and 10% of iOS/iPadOS devices in the program at no cost. Depends on Tier we go with: Tier 1 = 5% iOS/2% Mac and Tier 1+ = 10% iOS/4% Mac.  NOTE: this is the percent of all devices across the university.  Repairs of accidental damage are not covered and are at full cost with no discount.  Repairs for defects are covered at no cost.

Questions:

Will everyone be forced to by ACE?  No.  Purchase the Apple Care that is best for the situation

Will everyone be forced to buy the same length of coverage?  No, but we would like the initial order to be the same for the enrollment completion.

Does everyone have to purchase the same Tier?  Yes, that is why we are voting on it.

If we drop and break a device or pour a drink into it are we covered?  The repair of that device would be at full price with no discounts.

What is the difference in what we get with Apple Care + for Schools and ACE?

What is the cost difference between Apple Care + for Schools and ACE?  The cheapest Apple Care in Market Place today is the one where some replacements (mostly screens) can be replaced up to twice with a fee.  See the chart below for the price difference per model. Also See: https://www.apple.com/education/pricelists/pdfs/Apple_US_Education_Institution_Price_List-04-30-2021.pdf

Note: Green indicates where ACE is less expensive than the cheapest AC+S license, yellow indicates the same cost, and blue indicates ≤ $20 more.
Discussion.

Q&A – 15 min
You ask we try to answer 

MacTech Return to In Person Meetings Aug 2021 – 2 min
We will return to in person meetings on Tue Aug 10, 2021 at 2:30 pm in Hillsborough B16-B.  We will try to have a hybrid meeting using Zoom (not Meet) but that will depend on availability of equipment in B16B so make plans to attend in person if possible.  There will be no July 2021 meeting.

Next meeting: 

MacTech – Tue. Aug 10, 2021  In person/Zoom hybrid
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.