MacTech 05102022

MacTech Groups Agenda
Tue, May 10, 2022
2:30 to 4:30 pm
Hillsborough B16-B  &
https://ncsu.zoom.us/j/98050685794?pwd=bU9aQUVqaW5ydU5JS0k1bzA5V0Jqdz09

Announcements – 5 min 

OIT only supports macOS 10.15.7 or newer after Dec 31, 2021
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity Macintosh MultiUser Workflow uses NoLoAD configuration with local home directory at /Users/$uid$
OIT supports only Apple branded Intel (intel64) and Apple Silicon(arm64) hardware for macOS and software. Only unmodified iOS/iPadOS/tvOS is supported.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request an invitation by opening a help desk ticket at  help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf,  go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
Required Jamf Pro Implementation of Endpoint Protection Standard – go.ncsu.edu/jamfeps
JAMF Pro Cheat Sheet at go.ncsu.edu/jamfcheat for details on common configuration management tasks
JNUC 2022 – Everette will attend live – https://www.jamf.com/events/jamf-nation-user-conference/2022/  NOTE there is a cheaper (not free) virtual option that avoids travel and lodging costs.

Training – 5 min

Virtual Quick Start Jamf Pro at NCSU course – 1 Hour – available by scheduling Everette at calendly.com/ncsuega

Hands On only:

OIT-Managing Apple Devices with Jamf Pro – TBA
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro01-JPro01&deptName=OIT&instanceID=000007

OIT-Jamf Pro Best Practices for Packagers – TBA reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro03-JPro03&deptName=OIT&instanceID=000006 

OIT-Advanced Apple Device  Management with Jamf Pro – TBA
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro02-JPro02&deptName=OIT&instanceID=000006 

CrashPlan for Sub-Org Administrators – Request  reporter.ncsu.edu/link/courseview?courseID=OIT-CPlan1-CPlan1&deptName=OIT 

Local Based Commercial Training – training.computertree.com/course/ 

JAMF Pro Training – www.jamf.com/training/ 

Service Updates – 20 min 

Configuration Management  -Jamf Pro production is currently 10.37.2, test on nccloudtest is 10.38.0, and current beta is not available.  Tentative update of nc.jamfcloud.com Wed May 18, 2022. See release notes at
docs.jamf.com/10.38.0/jamf-pro/release-notes/index.html
  Jamf Pro is the only approved Configuration Management system for macOS, iOS/iPadOS, and tvOS.  See oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/
Discussion

Patch Management
OIT recommends the following best practice to deploy and patch macOS Applications in this order:
Mac Apps App Installers from the Jamf Catalog
App Store Apps with automatic update set
Patch Management Titles with latest packages from JCDS
Policies with custom packages
See docs.jamf.com/jamf-app-catalog/Jamf_App_Catalog.html for available App Installer and Patch Management titles.

Backup for Endpoints – The Code42  production service is at version 8.8.4.
For NEW installs only, use the package in JAMF is “NCSU-Campus-Install Code42-871.pkg” New installers will be created for version 10 due 2nd quarter 2022.. The “NCSU-Campus-Install Code42CrashPlan License and Config.pkg” is required in the policy as before for new installs.  

Internet Recovery – https://support.apple.com/en-us/HT204904.
Also see: https://mrmacintosh.com/restore-macos-firmware-on-an-apple-silicon-mac-boot-to-dfu-mode/
No change

Software Packaging
Change to Adobe distribution see discussion below

AntiMalware – No change.  DetectX Swift 1.0982 (universal) is still available and should be installed. See oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/    

Apple School Manager – No change. REMINDER Make sure you *unassign* any devices you have sent to surplus.

Endpoint Protection Standard  – Required Jamf Pro Implementation of Endpoint Protection Standard is at  go.ncsu.edu/jamfeps  

— 

Proposed Change to Adobe application Distribution – 20 min
Jamf has released their Mac Apps App Installers from the Jamf Catalog feature and testing has gone well.  Read about the feature here:
https://www.jamf.com/blog/jamf-app-installers-faq/
Anyone can start using these now and OIT recommends that Patch Titles be replaced with these. To setup an App Installer see
https://docs.jamf.com/10.37.0/jamf-pro/documentation/App_Installers.html
The majority of the Adobe Apps are already in the Jamf Catalog and installation and patching is working well in OIT testing.
OIT would like to stop creating installer packages for all Adobe products *except* those not in the App Store and not in the Jamf Catalog. The only packages we would produce would be universal packages for:
Premiere Rush
Lightroom Classic
NCSU-Campus-SDLicense_Only

NOTE: There is no change to cost.  All Adobe Installers regardless of  source install as Named User Licenses which would need to be purchased  from OIT licensing as usual. The conversion installer to change over to Shared Device License (NCSU-Campus-SDLicense_Only) would need to be applied and appropriate licenses purchased from OIT licensing as usual when needed (labs, multiuser devices, etc).

Discussion

New devices on Apple Obsolete List – 5 min
The following products will be obsolete (service unavailable) worldwide
MacBook Air (11-inch, Early 2014)*
MacBook Air (13-inch, Early 2014)*
MacBook Pro (Retina, 13-inch, Mid 2014)*
Discussion

Tech Short – Jamf Connect Configuration – 15 min
Everette will discuss a new way to create the Profile for Jamf Connect Login using the web GUI. We will also discuss why Ignore Roles (OIDCIgnoreAdmin key) should be set.
Discussion

Q&A – 15 min
You ask we try to answer 

Next meeting: 

MacTech – Tue. Jun 14, 2022  In person/Zoom hybrid
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.