MacTech 03102023

MacTech Groups Agenda
Tue, Mar 14, 2023
2:30 to 4:30 pm
In person Room B16-B Hillsborough Building
or
https://ncsu.zoom.us/j/98050685794?pwd=bU9aQUVqaW5ydU5JS0k1bzA5V0Jqdz09

Announcements – 5 min 

OIT only supports macOS 11.6.7 or newer after Dec 31, 2022 
NOTE: Many vendors are dropping support for 10.x versions of macOS.  If there is hardware that can not update to macOS 11 or newer, it is time to plan for replacement.
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity MultiUser Workflow uses XCreds with local home directory  See go.ncsu.edu/jamfcheat#xcreds
OIT supports only Apple branded Intel (intel64) and Apple Silicon(arm64) hardware for macOS and software. Only unmodified iOS/iPadOS/tvOS is supported.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request an invitation by opening a help desk ticket at  help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf,  go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
Required Jamf Pro Implementation of Endpoint Protection Standard – go.ncsu.edu/jamfeps
JAMF Pro Cheat Sheet at go.ncsu.edu/jamfcheat for details on common configuration management tasks
JNUC 2023- will be held in Austin, TX- Sep. 19 – 21     community.jamf.com/t5/jamf-nation-user-conference/jamf-nation-user-conference-2023-registration-is-open/td-p/283510
Jamf Spring Event – reg.rainfocus.com/flow/jamf/2023essenjamf/landing/page/page

Training – 5 min

Virtual Quick Start Jamf Pro at NCSU course – 1 Hour – available by scheduling Everette at calendly.com/ncsuega

Hands On only:

OIT-Managing Apple Devices with Jamf Pro TBA HLB B3
reporter.ncsu.edu/link/courseview?courseID=OIT-JPro01-JPro01&deptName=OIT&instanceID=000010

OIT-Jamf Pro Best Practices for Packagers Mar 23, 2023 1:30-4:30 HLB B3
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro03-JPro03&deptName=OIT&instanceID=000009

OIT-Advanced Apple Device Management with Jamf Pro Apr 27, 2022 1:30-4:30 HLB B3
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro02-JPro02&deptName=OIT&instanceID=000009

Local Based Commercial Training – training.computertree.com/course/ 

JAMF Pro Training – www.jamf.com/training/ 

Apple Training – training.apple.com/it New Apple training courses that now cover iOS 16, iPadOS 16, and macOS Ventura are live for Certified IT Professional and Certified Support Professional

 

Service Updates – 30 min 

Configuration Management  – Jamf Pro production is currently 10.43.1, test on nccloudtest is 10.44.1, and the beta is 10.45B1. 
The next update of Jamf Pro production is Mar  15, 2023 after 1800. This update fixes a cross site security issue.  See release notes at learn.jamf.com/bundle/jamf-pro-release-notes-10.44.1/page/Whats_New_in_This_Release.html
And
learn.jamf.com/bundle/jamf-pro-release-notes-current/page/New_Features_and_Enhancements.html
Jamf Pro is the only approved Configuration Management system for macOS, iOS, iPadOS, and tvOS.  See oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/
Discussion

Patch Management – No Change to the Jamf App Catalog which has 119 titles.
learn.jamf.com/bundle/jamf-app-catalog/page/Release_History_App_Installers.html

Jamf Connect Updates – the latest version of Jamf Connect, 2.21.0.  See the release notes at
learn.jamf.com/bundle/jamf-connect-documentation-current/page/Release_History.html
NOTE: Jamf Connect 2.20.0 is last version that supports macOS 10.x
Discussion

XCreds Project – Release version – NCSU-Campus-XCreds_Build-3347_Version-2.2.pkg.
Dev version – PreBeta-XCreds_Build-3448_Version-2.3.pkg
Info: github.com/twocanoes/xcreds/releases/
See go.ncsu.edu/jamfcheat#xcreds and go.ncsu.edu/jamfcheat#jc for implementation details.

Backup for Endpoints – We are waiting on CrashPlan version 11 to be released to our service instance likely before the end of Mar 2023.  Installers for 11.0 will be available when they are released to NC State.
macOS PPPC profiles will need to update to the new CrashPlan developer Id. For details see:
support.crashplan.com/hc/en-us/articles/8695023896845-Grant-CrashPlan-permissions-to-macOS-devices                                                                                                                          
NOTE: All updates to existing clients are pushed from the web service.
For NEW installs only, use the package in JAMF is “NCSU-Campus-Code42_CrashPlan-10.4.0.pkg” The “NCSU-Campus-Install Code42CrashPlan License and Config.pkg” is required in the policy as before for new installs. 

Internet Recovery – No change
https://support.apple.com/en-us/HT204904.
Also see: https://mrmacintosh.com/restore-macos-firmware-on-an-apple-silicon-mac-boot-to-dfu-mode/

Software Packaging
New M1 Autopkg servers are in production.

AntiMalware – No Change
DetectX Swift 1.0983 (universal) is still available. See oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/   
For Sites that have paid for a Crowdstrike Falcon license use NCSU-OIT-Crowdstrike-6.4.155.03.pkg for new installs.  Patching is done directly from the MCNC Crowdstike server.   Note that a PPPC configuration profile is needed for silent installation on devices with non-admin users.  See details at:
help.redcanary.com/hc/en-us/articles/4535994057879-How-to-Manually-Create-a-Jamf-Pro-Configuration-Profile-for-all-CrowdStrike-macOS-Sensor-Versions

Apple School Manager – No change. REMINDER Make sure you *unassign* any devices you have sent to surplus.

Endpoint Protection Standard  – Required Jamf Pro Implementation of Endpoint Protection Standard is at  go.ncsu.edu/jamfeps  

— 

Standard Users (i.e. non-admins) can now update MacOS 13 – 10 min
As of  Mar 13, 2023 Standard, non-administrative users can update to macOS 13.2.1 via System Settings.
Going forward, new versions of macOS can be deferred for up to 90 days (with Configuration Profile).  This is very good for security but be prepared for Vendor Lag.  We expect all versions of macOS, including Major Releases (ie 14.x) but upgradable by Standard Users. 
A good discussion of the issue is here:
unlimited.ethz.ch/display/idclientdelivery/2022/10/13/When+and+how+to+upgrade+to+macOS+Ventura
To setup deferral with Jamf Pro see:
docs.jamf.com/technical-papers/jamf-pro/deploying-macos-upgrades/10.34.0/Deferring_maOS_Software_Upgrades_and_Updates.html
Remember to use an Apple School Manager login at appleseed.apple.com to get the latest test versions of macOS. 
Discussion

Tech Short: Terminal command you should know –  1 min
Everette talks about a few unix command line tools that can help.  Find out about:
sw_vers
du -hd1
open x-apple.systempreferences:com.apple.Software-Update-Settings.extension
(derflounder.wordpress.com/2022/10/25/opening-macos-venturas-system-settings-to-desired-locations-via-the-command-line/#more-11798_ )
ipconfig getifaddr en0
system_profiler SPHardwareDataType (SPSoftwareDataType, -listDataTypes)
defaults read /Library/Managed\ Preferences/edu.unc17.site “Site Name”
softwareupdate –list
lpstat -a
/usr/libexec/PlistBuddy -c “Print :lastUserName” /Library/Preferences/com.apple.loginwindow.plist
dscl . read /Users/$(/usr/libexec/PlistBuddy -c “Print :lastUserName” /Library/Preferences/com.apple.loginwindow.plist ) NFSHomeDirectory
Discussion

Rumor Roundup – 10 min
What are your favorite predictions for the next Apple Products? MacPro M3 Ultra? MacBook Air 15”? M3 iPad Pro? Should it fold? How much would you pay for built-in satellite internet?
Discussion

Q&A – 15 min
You ask we try to answer 

Next meeting:
MacTech – Tue. Apr 11, 2023  In person/Zoom hybrid
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.



Posted in OIT