MacTech Groups Agenda
Tue, Jan 17, 2023
2:30 to 4:30 pm
In person Room B16-B Hillsborough Building
or
https://ncsu.zoom.us/j/98050685794?pwd=bU9aQUVqaW5ydU5JS0k1bzA5V0Jqdz09
Announcements – 5 min
OIT only supports macOS 11.6.7 or newer after Dec 31, 2022
NOTE: Many vendors are dropping support for 10.x versions of macOS. If there is hardware that can not update to macOS 11 or newer, it is time to plan for replacement.
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity MultiUser Workflow uses XCreds with local home directory See go.ncsu.edu/jamfcheat#xcreds
OIT supports only Apple branded Intel (intel64) and Apple Silicon(arm64) hardware for macOS and software. Only unmodified iOS/iPadOS/tvOS is supported.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request an invitation by opening a help desk ticket at help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf, go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
Required Jamf Pro Implementation of Endpoint Protection Standard – go.ncsu.edu/jamfeps
JAMF Pro Cheat Sheet at go.ncsu.edu/jamfcheat for details on common configuration management tasks
Training – 5 min
Virtual Quick Start Jamf Pro at NCSU course – 1 Hour – available by scheduling Everette at calendly.com/ncsuega
Hands On only:
OIT-Managing Apple Devices with Jamf Pro Feb 21, 2023 1:30-4:30 HLB B3
reporter.ncsu.edu/link/courseview?courseID=OIT-JPro01-JPro01&deptName=OIT&instanceID=000010
OIT-Jamf Pro Best Practices for Packagers Mar 23, 2023 1:30-4:30 HLB B3
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro03-JPro03&deptName=OIT&instanceID=000009
OIT-Advanced Apple Device Management with Jamf Pro Apr 27, 2022 1:30-4:30 HLB B3
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro02-JPro02&deptName=OIT&instanceID=000009
Local Based Commercial Training – training.computertree.com/course/
JAMF Pro Training – www.jamf.com/training/
Apple Training – training.apple.com/it New Apple training courses that now cover iOS 16, iPadOS 16, and macOS Ventura are live for Certified IT Professional and Certified Support Professional
Service Updates – 30 min
Configuration Management – Jamf Pro production is currently 10.42.1, test on nccloudtest is 10.42.1, and the current beta is 10.43B1. Jamf Pro is the only approved Configuration Management system for macOS, iOS, iPadOS, and tvOS. See oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/
Discussion
Patch Management – No Change The Jamf App Catalog at docs.jamf.com/jamf-app-catalog/Jamf_App_Catalog.html still has 116 titles.
Jamf Connect Updates – the latest version of Jamf Connect, 2.19.0. This update fixes the issue with Jamf Connect having to be re-enabled after an OS update. See the release notes at
docs.jamf.com/jamf-connect/2.19.0/documentation/Release_History.html#ID-000006a1
REMINDER https://login.microsoftonline.com/common/.well-known/openid-configuration is no longer supported and “common” must be replaced with our tenant id (see same config profile)
Discussion
XCreds Project – The latest release version of XCreds is available on Jamf Pro as NCSU-Campus-XCreds_Build-3347_Version-2.2.pkg. See: github.com/twocanoes/xcreds/releases/
See go.ncsu.edu/jamfcheat#xcreds and go.ncsu.edu/jamfcheat#jc for implementation details.
This release fixes the issue with FileVault not enabling on first login.
Backup for Endpoints – No Change The Crashplan production service is at version 10.4.0.224.
All updates to existing clients are pushed from the web service. The latest installer from CrashPlan is now fully universal! For NEW installs only, use the package in JAMF is “NCSU-Campus-Code42_CrashPlan-10.4.0.pkg” The “NCSU-Campus-Install Code42CrashPlan License and Config.pkg” is required in the policy as before for new installs.
CrashPlan expects and app name and branding to change in early Feb 2023. This change will include some path names so please be aware if you have documentation or workflows that have “Code42” in them.
Internet Recovery – No change
https://support.apple.com/en-us/HT204904.
Also see: https://mrmacintosh.com/restore-macos-firmware-on-an-apple-silicon-mac-boot-to-dfu-mode/
Software Packaging
New Autopkg servers based in M1 MacMinis are purchased and ready to replace 2012 models in Jan 2023.
AntiMalware – No Change
DetectX Swift 1.0983 (universal) is still available. See oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/
For Sites that have paid for a Crowdstrike Falcon license use NCSU-OIT-Crowdstrike-6.4.155.03.pkg for new installs. Patching is done directly from the MCNC Crowdstike server. Note that a PPPC configuration profile is needed for silent installation on devices with non-admin users. See details at:
help.redcanary.com/hc/en-us/articles/4535994057879-How-to-Manually-Create-a-Jamf-Pro-Configuration-Profile-for-all-CrowdStrike-macOS-Sensor-Versions
Apple School Manager – No change. REMINDER Make sure you *unassign* any devices you have sent to surplus.
Endpoint Protection Standard – Required Jamf Pro Implementation of Endpoint Protection Standard is at go.ncsu.edu/jamfeps
—
Do More With Mac Mid-Atlantic Webinar – 5 min
Apple has invited everyone to an overview seminar on new Apple services and technologies.
Full information at: https://drive.google.com/file/d/1_sFLvi8nwRROS2FKSM9E1efvy5qdepBh/view?usp=sharing
There are 2 dates for the event:
— Tuesday, February 7th – 12 to 1 p.m. EST
https://appleinc.webex.com/weblink/register/re6075ff743e6c5f5097d3457346b34de
and
— Tuesday, February 7th 4 to 5 p.m. EST
https://appleinc.webex.com/weblink/register/r63b198c37fcdecba73cf8e26410022b4
Discussion
Deferral dates ending for MacOS 13 – 10 min
If you are still blocking macOS 13 Ventura via 90 Day MDM deferral profile please pay attention to these dates:
Jan 22, 2023 = 13.0 full installer upgrade will start showing.
**March 13, 2023 = 13.1 delta upgrade will show allowing non admin users to upgrade!!
This is a permanent change going forward and everyone should be prepared to support the latest macOS within 90 days of release. Lab Users can update machines so stay ahead of them. Remember to use an Apple School Manager login at appleseed.apple.com to get the latest test versions of macOS.
Discussion
Apple Silicon devices require Rosetta2 for many printers now – 5 min
Please be aware that the print drivers for many old printers esp HP are not being updated to universal as vendors switch over to app based printing. The printer installers and software will require Rosetta2 on ASi devices and must be installed before printing. Also be aware that macOS 13 may not automatically prompt end users to download and install the old print software but will send them generically to the App Store instead. See go.ncsu.edu/jamfcheat#R2 for tips on automated management of Rosetta2.
Discussion
Login Items Background Permissions and Notifications Template Profile – 10 min
At our Dec 2022 meeting we talked about:
https://hcsonline.com/images/PDFs/Manage_Background_Tasks_Jamf.pdf
OIT has updated the Jamf CheatSheet with a Template Config Profile and instructions on the required Smart Group setup at go.ncsu.edu/jamfcheat#smmli.
Warning: LaunchAgents and LaunchDaemons are changing- 10 min
As a heads up, if you (or a vendor you use) rely on custom LaunchAgents or LaunchDaemons Apple is changing the way these will be allowed to work. Already available, but not mandatory YET, in macOS 13 is the new Service Management API. A good discussion of how this works technically is at:
developer.apple.com/documentation/servicemanagement/updating_your_app_package_installer_to_use_the_new_service_management_api
What does this mean? Anyone using a custom LaunchAgend or LaunchDaemon should either find a different way to do the work or move to the new method described at Apple Developer BEFORE macOS 14.
Discussion
Q&A – 15 min
You ask we try to answer
Next meeting:
MacTech – Tue. Feb 14, 2023 In person/Zoom hybrid
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.