MacTech Groups Agenda
Tue, Apr 12, 2022
2:30 to 4:30 pm
AFTC 106 &
https://ncsu.zoom.us/j/98050685794?pwd=bU9aQUVqaW5ydU5JS0k1bzA5V0Jqdz09
Announcements – 5 min
OIT only supports macOS 10.15.7 or newer after Dec 31, 2021
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity Macintosh MultiUser Workflow uses NoLoAD configuration with local home directory at /Users/$uid$
OIT supports only Apple branded Intel (intel64) and Apple Silicon(arm64) hardware for macOS and software. Only unmodified iOS/iPadOS/tvOS is supported.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request an invitation by opening a help desk ticket at help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf, go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
Required Jamf Pro Implementation of Endpoint Protection Standard – go.ncsu.edu/jamfeps
JAMF Pro Cheat Sheet at go.ncsu.edu/jamfcheat for details on common configuration management tasks
JNUC 2022 – Everette will attend live – https://www.jamf.com/events/jamf-nation-user-conference/2022/ NOTE there is a cheaper (not free) virtual option that avoids travel and lodging costs.
Training – 5 min
Virtual Quick Start Jamf Pro at NCSU course – 1 Hour – available by scheduling Everette at calendly.com/ncsuega
Hands On only:
OIT-Managing Apple Devices with Jamf Pro – Feb 24 – 1:30-4:30 pm Hillsborough B3
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro01-JPro01&deptName=OIT&instanceID=000007
OIT-Jamf Pro Best Practices for Packagers – Mar 15 – 1:30-4:30 pm Hillsborough B3
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro03-JPro03&deptName=OIT&instanceID=000006
OIT-Advanced Apple Device Management with Jamf Pro – Apr 19 – 1:30-4:30 pm Hillsborough B3
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro02-JPro02&deptName=OIT&instanceID=000006
CrashPlan for Sub-Org Administrators – Request – reporter.ncsu.edu/link/courseview?courseID=OIT-CPlan1-CPlan1&deptName=OIT
Local Based Commercial Training – training.computertree.com/course/
JAMF Pro Training – www.jamf.com/training/
Service Updates – 20 min
Configuration Management -Jamf Pro production is currently 10.37.2, test on nccloudtest is 10.37.2, and current beta is 10.38.0B2. Jamf Pro is the only approved Configuration Management system for macOS, iOS/iPadOS, and tvOS. See oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/
Discussion
Patch Definition Management – No Change
The current, production version of Jamf ProJamf implements the Mac Apps App Installer more later
Backup for Endpoints – The Code42 production service is at version 8.8.4.
For NEW installs only, use the package in JAMF is “NCSU-Campus-Install Code42-871.pkg”(will be updated when available as a universal install). The “NCSU-Campus-Install Code42CrashPlan License and Config.pkg” is required in the policy as before for new installs.
Internet Recovery – https://support.apple.com/en-us/HT204904.
Also see: https://mrmacintosh.com/restore-macos-firmware-on-an-apple-silicon-mac-boot-to-dfu-mode/
No change
Software Packaging – Testing to see if we can convert Adobe packages installed by Jamf App Installers to Shared Device license.
AntiMalware – No change. DetectX Swift 1.0982 (universal) is still available and should be installed. See oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/
The scanning script is available to deploy as run-detectx-search.sh (replaces run-detectx-search.pl)
Apple School Manager – No change. REMINDER Make sure you *unassign* any devices you have sent to surplus.
Endpoint Protection Standard – Required Jamf Pro Implementation of Endpoint Protection Standard is at go.ncsu.edu/jamfeps
—
Jamf Mac Apps App Installers – 10 min
Jamf Pro Now implements the Mac Apps App Installer feature allowing automated installation and patching of a curated list of app installers. See https://docs.jamf.com/10.37.0/jamf-pro/documentation/App_Installers.html
Available software list is at https://docs.jamf.com/jamf-app-catalog/App_Installers_Software_Titles.html
The installation is controlled by Smart Groups where criteria like “does not have app name” causes installation on newly provisioned devices. Ongoing, automatic updates could be accomplished using a Smart group that has the criteria “does not have app name” -OR- “has app name” to cover the initial installation and patch updates.
For more information see https://www.modtitan.com/2022/03/in-weeds-with-app-installers-preview.html
Discussion
Jamf Pro Issues and Policy Delete Best Practice – 10 min
During the last week of March we experienced extreme slowness in our Jamf Pro deployment (before the 10.37.2 update). While working with Jamf Support it was found that our database was under performing and a rolling process restart cleared that issue. However, during that time some policies were deleted in a few sites and 1 of them installing Google Chrome tripped a known issue in Jamf Pro. The issue sees a policy de-scoped before it is deleted which exposes the policy to run on all devices in the JSS. Jamf Support identified this as the root cause of some devices having Chrome removed during this time. (Unrelated to the issue where Chrome Auto-Update also failed and removed Chrome). Jamf Support says this issue is extremely rare and we only tripped it due to the database issue. However they recommend as best practice to disable any policy before deleting it.
Discussion
C – 10 min
Discussion
In Person – Apple Hardware Demo and Hands on with Dave – 45 min
3:00 pm The new Mac Studio: Performance on your desk
3:45 pm The new iPad Air with M1: Performance in your hand
4:00 pm So, no 27” iMac: Now what?
4:15 pm What’s new for IT: OS updates, management enhancements
Discussion
Q&A – 15 min
You ask we try to answer
Next meeting:
MacTech – Tue. May 10, 2022 In person/Zoom hybrid
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.