MacTech 08092022

MacTech Groups Agenda
Tue, Aug  9, 2022
2:30 to 4:30 pm
https://ncsu.zoom.us/j/98050685794?pwd=bU9aQUVqaW5ydU5JS0k1bzA5V0Jqdz09

Announcements – 5 min 

OIT only supports macOS 11.6.7 or newer after Dec 31, 2022 
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity Macintosh MultiUser Workflow uses NoLoAD configuration with local home directory at /Users/$uid$
OIT supports only Apple branded Intel (intel64) and Apple Silicon(arm64) hardware for macOS and software. Only unmodified iOS/iPadOS/tvOS is supported.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request an invitation by opening a help desk ticket at  help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf,  go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
Required Jamf Pro Implementation of Endpoint Protection Standard – go.ncsu.edu/jamfeps
JAMF Pro Cheat Sheet at go.ncsu.edu/jamfcheat for details on common configuration management tasks
JNUC 2022 – Everette will attend live – https://www.jamf.com/events/jamf-nation-user-conference/2022/  NOTE there is a cheaper (not free) virtual option that avoids travel and lodging costs.
UNC CAUSE 2022  is in Charlotte – 2022.unccause.org.  If you are going, consider riding the train with us!

Training – 5 min

Virtual Quick Start Jamf Pro at NCSU course – 1 Hour – available by scheduling Everette at calendly.com/ncsuega

Hands On only:

OIT-Jamf Pro Best Practices for Packagers – 9/22/2022 2:30-4:30 pm reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro03-JPro03&deptName=OIT&instanceID=000008

OIT-Managing Apple Devices with Jamf Pro – 10/27/2022 2:30-4:30 pm
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro01-JPro01&deptName=OIT&instanceID=000009

OIT-Advanced Apple Device  Management with Jamf Pro – 11/22/2022 2:00-5:00pm
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro02-JPro02&deptName=OIT&instanceID=000008 

Local Based Commercial Training – training.computertree.com/course/ 

JAMF Pro Training – www.jamf.com/training/ 

Service Updates – 30 min 

Configuration Management  – Jamf Pro production is currently 10.39.1, test on nccloudtest is 10.40.1, and the current beta is 10.41.0B1.  The production service on nc.jamfcloud.com will be updated to 10.40.1 tomorrow, Wed Aug 10, 2022 between 1800 and 2345 as approved.

The Cheat Sheet at go.ncsu.edu/jamfcheat has been updated with more JSON templates for easier configuration profiles to configure common settings.
Jamf Pro is the only approved Configuration Management system for macOS, iOS/iPadOS, and tvOS.  See oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/
Discussion

Patch Management – The Jamf App Catalog at docs.jamf.com/jamf-app-catalog/Jamf_App_Catalog.html now has 90 titles and should be used to install and patch on macOS.

Backup for Endpoints – The Crashplan  production service is at version 10.2.0.14.
Code42 is now Crashplan again and is its own separate company again as of Aug 1, 2022. See www.crashplan.com/en-us/july-2022-investment-frequently-asked-questions/
In discussion with Crashplan sales and support there is no change to our contracts, features, or unlimited storage for backups.  A new universal installer will be available with the next, rebranded release sometime before the end of 2022.  Please note the app name and some of the paths will change with the next installer.
For NEW installs only, use the package in JAMF is “NCSU-Campus-Code42_Crashplan-10.2.0-univ.pkg” The “NCSU-Campus-CrashPlan License.pkg” is required in the policy as before for new installs.  (Note this universal installer is one we fabricated by wrapping the 2 installers Crashplan provides with a postinstall that figures out the right one to use.)

Internet Recovery – https://support.apple.com/en-us/HT204904.
Also see: https://mrmacintosh.com/restore-macos-firmware-on-an-apple-silicon-mac-boot-to-dfu-mode/
No change

Software Packaging
FoxIT and its permanent license  have been updated to the latest versions available from OIT Software Licensing.

AntiMalware –  DetectX Swift 1.0983 (universal) is still available. See oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/   
For Sites that have paid for a Crowdstrike Falcon license use NCSU-OIT-Crowdstrike-6.4.155.03.pkg for new installs.  Patching is done directly from the MCNC Crowdstike server.   Note that a PPPC configuration profile is needed for silent installation on devices with non-admin users.  See details at:
help.redcanary.com/hc/en-us/articles/4535994057879-How-to-Manually-Create-a-Jamf-Pro-Configuration-Profile-for-all-CrowdStrike-macOS-Sensor-Versions

Apple School Manager – No change. REMINDER Make sure you *unassign* any devices you have sent to surplus.

Endpoint Protection Standard  – Required Jamf Pro Implementation of Endpoint Protection Standard is at  go.ncsu.edu/jamfeps  

— 

XCreds PreBeta for Multi User Login – 15 min
NCSU OIT has sponsored a new software package by Twocanoes that works like NoLoAD/Nomad but uses OAuth for SSO providers like MS Azure, Google Identity, etc. The package is free and open source.
See github.com/twocanoes/xcreds/wiki/AdminGuide XCreds login has been successfully deployed via Jamf Prestage to M1 and M2 macOS devices and installed over NoLoAD (after disabling NoLo with authchanger) on M1 and Intel devices. A Jamf JSON template with NCSU settings is available from drive.google.com/file/d/1ED_KdsK9bySi8WRkOpTfRLEyRLC2ScE3/view?usp=sharing
Demo
Discussion

Using Virtual Buddy for macOS testing – 15 min
With the release of Apple’s new virtualization frameworks at WWDC the virtualization of macOS on macOS has become free and legal.  This can be a huge asset for testing new software, new configurations and for presentations. One new freeware virtualization product is Virtual Buddy from github.com/insidegui/VirtualBuddy. The software required macOS 12.3+ running on Apple Silicon.  So far macOS is the only guest OS supported (no win, linux in works). Drag and drop between host and guest works using Screen Sharing but cut and paste does not. Using APFS volumes “cloning” is done by duplicating the virtual disk file which takes up zero extra space. Demo
Discussion

Building a better support experience with Support.app – 15 min
A new free and open source app called Support.app is available from github.com/root3nl/SupportApp which provides a menu bar app configured with a configuration profile to show information about the macOS and support resources.  A Jamf JSON manifest with some interesting defaults for NCSU is available at
drive.google.com/file/d/1c82dhU6gojFdADXCyHVRFgXh51p8ncfW/view?usp=sharing
Demo of how to use with Jamf Variables (docs.jamf.com/jamf-pro/administrator-guide/Computer_Configuration_Profiles.html) and SF Symbols (developer.apple.com/sf-symbols/) for advanced customization.
Discussion

Q&A – 15 min
You ask we try to answer 

Next meeting:
MacTech – Tue. Sep 13, 2022  In person/Zoom hybrid
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.