MacTech 01172023


MacTech Groups Agenda
Tue, Jan 17, 2023
2:30 to 4:30 pm
In person Room B16-B Hillsborough Building

Announcements – 5 min 

OIT only supports macOS 11.6.7 or newer after Dec 31, 2022 
NOTE: Many vendors are dropping support for 10.x versions of macOS.  If there is hardware that can not update to macOS 11 or newer, it is time to plan for replacement.
Status page for services see
OIT Macintosh Support Web Site for updates.
Slack group #macintosh
Apple Sales: Paul & Sys Eng: Dave
Vintage and Obsolete Apple Products:
Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
Antivirus for university owned devices –
Unity MultiUser Workflow uses XCreds with local home directory  See
OIT supports only Apple branded Intel (intel64) and Apple Silicon(arm64) hardware for macOS and software. Only unmodified iOS/iPadOS/tvOS is supported.
Please remember to verify prices at with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request an invitation by opening a help desk ticket at Must login to GSX monthly!!
JAMF Pro Enterprise service, and for details
Required Jamf Pro Implementation of Endpoint Protection Standard –
JAMF Pro Cheat Sheet at for details on common configuration management tasks

Training – 5 min

Virtual Quick Start Jamf Pro at NCSU course – 1 Hour – available by scheduling Everette at

Hands On only:

OIT-Managing Apple Devices with Jamf Pro Feb 21, 2023 1:30-4:30 HLB B3

OIT-Jamf Pro Best Practices for Packagers Mar 23, 2023 1:30-4:30 HLB B3

OIT-Advanced Apple Device Management with Jamf Pro Apr 27, 2022 1:30-4:30 HLB B3

Local Based Commercial Training – 

JAMF Pro Training – 

Apple Training – New Apple training courses that now cover iOS 16, iPadOS 16, and macOS Ventura are live for Certified IT Professional and Certified Support Professional

Service Updates – 30 min 

Configuration Management  – Jamf Pro production is currently 10.42.1, test on nccloudtest is 10.42.1, and the current beta is 10.43B1.  Jamf Pro is the only approved Configuration Management system for macOS, iOS, iPadOS, and tvOS.  See

Patch Management – No Change The Jamf App Catalog at still has 116 titles.

Jamf Connect Updates – the latest version of Jamf Connect, 2.19.0. This update fixes the issue with Jamf Connect having to be re-enabled after an OS update.  See the release notes at
REMINDER is no longer supported and “common” must be replaced with our tenant id (see same config profile)

XCreds Project – The latest release version of XCreds is available on Jamf Pro as NCSU-Campus-XCreds_Build-3347_Version-2.2.pkg. See:
See and for implementation details.
This release fixes the issue with FileVault not enabling on first login.

Backup for Endpoints – No Change The Crashplan production service is at version
All updates to existing clients are pushed from the web service. The latest installer from CrashPlan is now fully universal! For NEW installs only, use the package in JAMF is “NCSU-Campus-Code42_CrashPlan-10.4.0.pkg” The “NCSU-Campus-Install Code42CrashPlan License and Config.pkg” is required in the policy as before for new installs.
CrashPlan expects and app name and branding to change in early Feb 2023.  This change will include some path names so please be aware if you have documentation or workflows that have “Code42” in them. 

Internet Recovery – No change
Also see:

Software Packaging
New Autopkg servers based in M1 MacMinis are purchased and ready to replace 2012 models in Jan 2023.

AntiMalware – No Change
DetectX Swift 1.0983 (universal) is still available. See   
For Sites that have paid for a Crowdstrike Falcon license use NCSU-OIT-Crowdstrike- for new installs.  Patching is done directly from the MCNC Crowdstike server.   Note that a PPPC configuration profile is needed for silent installation on devices with non-admin users.  See details at:

Apple School Manager – No change. REMINDER Make sure you *unassign* any devices you have sent to surplus.

Endpoint Protection Standard  – Required Jamf Pro Implementation of Endpoint Protection Standard is at  


Do More With Mac Mid-Atlantic Webinar  – 5 min
Apple has invited everyone to an overview seminar on new Apple services and technologies.
Full information at:
There are 2 dates for the event:
— Tuesday, February 7th – 12 to 1 p.m. EST
— Tuesday, February 7th 4 to 5 p.m. EST

Deferral dates ending for MacOS 13 – 10 min
If you are still blocking macOS 13 Ventura via 90 Day MDM deferral profile please pay attention to these dates:
Jan 22, 2023 = 13.0 full installer upgrade will start showing.
**March 13, 2023 = 13.1 delta upgrade will show allowing non admin users to upgrade!!
This is a permanent change going forward and everyone should be prepared to support the latest macOS within 90 days of release. Lab Users can update machines so stay ahead of them.  Remember to use an Apple School Manager login at to get the latest test versions of macOS. 

Apple Silicon devices require Rosetta2 for many printers now – 5 min
Please be aware that the print drivers for many old printers esp HP are not being updated to universal as vendors switch over to app based printing.  The printer installers and software will require Rosetta2 on ASi devices and must be installed before printing.  Also be aware that macOS 13 may not automatically prompt end users to download and install the old print software but will send them generically to the App Store instead. See for tips on automated management of Rosetta2.

Login Items Background Permissions and Notifications Template Profile – 10 min
At our Dec 2022 meeting we talked about:
OIT has updated the Jamf CheatSheet with a Template Config Profile and instructions on the required Smart Group setup at

Warning: LaunchAgents and LaunchDaemons are changing- 10 min
As a heads up, if you (or a vendor you use) rely on custom LaunchAgents or LaunchDaemons Apple is changing the way these will be allowed to work.  Already available, but not mandatory YET,  in macOS 13 is the new Service Management API. A good discussion of how this works technically is at:
What does this mean?  Anyone using a custom LaunchAgend or LaunchDaemon should either find a different way to do the work or move to the new method described at Apple Developer BEFORE macOS 14.

Q&A – 15 min
You ask we try to answer 

Next meeting:
MacTech – Tue. Feb 14, 2023  In person/Zoom hybrid
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.