MacTech 08102021

MacTech Groups Agenda
Tue, Aug10, 2021
2:30 to 4:30 pm
Hillsborough B16-B  &
https://ncsu.zoom.us/j/98050685794?pwd=bU9aQUVqaW5ydU5JS0k1bzA5V0Jqdz09

Announcements – 5 min

OIT only supports macOS 10.14.6 or newer
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
macOS versions that shipped with Intel Hardware: support.apple.com/kb/HT1159
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity Macintosh MultiUser Workflow uses NoLoAD configuration with local home directory at /Users/$uid$
OIT supports only Apple branded Intel (i386) and Apple Silicon(arm64) hardware for macOS and software. Only unmodified iOS/iPadOS/tvOS is supported.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request an invitation by opening a help desk ticket at  help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf,  go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
JAMF Pro Cheat Sheet at go.ncsu.edu/jamfcheat for details on common configuration management tasks

Training – 5 min

Virtual Quick Start Jamf Pro at NCSU course – 1 Hour – available by scheduling Everette at calendly.com/ncsuega

Hands On only:

OIT-Managing Apple Devices with Jamf Pro – Sep 23 – 1:30-4:30 pm Hillsborough B3
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro01-JPro01&deptName=OIT&instanceID=000007

OIT-Jamf Pro Best Practices for Packagers – Oct 26 – 1:30-4:30 pm Hillsborough B3 reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro03-JPro03&deptName=OIT&instanceID=000006

OIT-Advanced Apple Device  Management with Jamf Pro – Nov 16 – 1:30-4:30 pm Hillsborough B3
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro02-JPro02&deptName=OIT&instanceID=000006

CrashPlan for Sub-Org Administrators – Request –  reporter.ncsu.edu/link/courseview?courseID=OIT-CPlan1-CPlan1&deptName=OIT

Local Based Commercial Training – training.computertree.com/course/

JAMF Pro Training – www.jamf.com/training/

Service Updates – 30 min 

Configuration Management  -Jamf Pro production is currently 10.30.3, test on nccloudtest is 10.31.0, and the current beta is 10.32B1.  Tentative date for production update to 10.31.1 is Aug 25, 2021 depending on when it is released.  Jamf Pro is the only approved Configuration Management system for macOS, iOS/iPadOS, and tvOS.  See oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/
Discussion

Patch Definition Management
The Community Patch patch server and the kinobi patch server have been removed.
All patch titles are updated by Jamf  at this point.

Backup for Endpoints – The Code42  production service is at version 8.6.0 today.  Version 8.7.0 was released today (08/10/2021).  Existing clients are automatically updated from the cloud server.  For NEW installs there will be a new installers as soon as we can test them.  See release notes at https://support.code42.com/Release_Notes/Code42_app_version_8.7_release_notes.  Code42 is in the process of separating their InCydr and Backup products.
Also There are new I2 contacts coming that changes the product bundling but we still don’t have any details.

Internet Recovery – https://support.apple.com/en-us/HT204904.
Also see: https://mrmacintosh.com/restore-macos-firmware-on-an-apple-silicon-mac-boot-to-dfu-mode/
Apple Silicon devices running macOS are more like iPads now and have several recovery options including:
macOS Recovery
System Recovery – Will boot automatically if macOS Recovery is unavailable
macOS Big Sur USB Installer Drive – External boot for macOS Installers is enabled by default on ASi
Apple Configurator 2 REVIVE – reinstalls macOS Recovery retaining user data on the drive
Apple Configurator 2 RESTORE – reinstalls macOS Recovery, ERASES drive!! and reinstalls macOS

Software Packaging – autopkg should now be working 99% of the time.  New less manual update recipes for Adobe products

AntiMalware – No change.  DetectX Swift (intel) is still available and should be installed see oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/

Apple School Manager – No change. REMINDER Make sure you *unassign* any devices you have sent to surplus.

AppleCare for Enterprise – See below.

Endpoint Protection Standard  – Phase 2 deadline- Was Dec 31, 2020.
See Jamf Pro Cheat Sheet at:  go.ncsu.edu/jamfcheat

Test with Beta Apple OSes – 15 min
This fall Apple will release macOS 12 Monterey.  It is highly recommended to test with the beta versions to be ready.  Remember any Apple School Manager Apple ID can be used to get beta releases from appleseed.apple.com.  Note that you will need to learn to use IPSW restore/revive files and the latest beta Apple Configurator See: ​​https://osxdaily.com/2021/01/28/download-macos-ipsw-files-apple-silicon-m1-mac/  The link covers Apple Silicon but going forward these files will be used for all Apple devices.  Discussion

Adobe Installer Updates – 15 min
While we intend to release quarterly updates to all Adobe apps for both intel and arm64(Apple Silicon), there have been a large number of security updates in the last few months like nvd.nist.gov/vuln/detail/CVE-2021-36004.  Please look in Jamf Pro for the latest version numbers(higher numbers are more recent) in the 2021 releases.  The package names will be like “NCSU-Campus-Adobe_<product_name>_2021_Installer-<version.number>.zip.  The new autopkg recipes from JamJar also upload an uninstaller but these usually don’t work unless you have only that product installed and want to remove it.   Discussion

AppleCare of Enterprise Updates – 30 min
OIT has gotten feedback from campus and the major sticking point is who can use the 4%mac / 10% iPad replacements.  Much of the feedback indicated departments would rather take advantage of AppleCare for Schools – No Deductible, even at a higher cost.  Included below is the benefits summary.  If your department is interested in this program please contact ega@ncsu.edu.  At this point we will not move forward with a university wide program.

What does ACE provide:
https://www.apple.com/support/professional/enterprise/

  • All defect repair benefits provided by Apple Care + for Schools

  • 2-day, On Site Repair Service

  • 24/7 End User Help Desk Support for covered devices

  • Direct access to AppleCare Help Desk Support including unlimited telephone technical support for hardware and software diagnosis and troubleshooting and issue isolation for Apple-based solutions

  • One (1) university level support issue (integration, network, etc) per year

  • Replacement of upto 4% of Macs and 10% of iOS/iPadOS devices in the program at no cost.
    Tier 1+ = 4% Mac / 10% iPad.  NOTE: this is the percent of all devices across the university for replacement of the whole unit only.  Repairs of accidental damage are not covered and are at full cost with no discount.  Repairs for product defects are covered at no cost.

Discussion.

Q&A – 15 min
You ask we try to answer

Next meeting: 

MacTech – Tue. Sep 14, 2021  In person/Zoom hybrid
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.