MacTech 04112023

 

MacTech Groups Agenda
Tue, Apr 11, 2023
2:30 to 4:30 pm
In person Room B16-B Hillsborough Building
or
https://ncsu.zoom.us/j/98050685794?pwd=bU9aQUVqaW5ydU5JS0k1bzA5V0Jqdz09

Announcements – 5 min 

OIT only supports macOS 11.6.7 or newer after Dec 31, 2022 
NOTE: Many vendors are dropping support for 10.x versions of macOS.  If there is hardware that can not update to macOS 11 or newer, it is time to plan for replacement.
The June 13, 2023 meeting will be the silver 25th anniversary of the MacTech Group at NCSU formed in 1998.
Status page for jamfcloud.com services see http://status.jamfsoftware.com

OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity MultiUser Workflow uses XCreds with local home directory  See go.ncsu.edu/jamfcheat#xcreds
OIT supports only Apple branded Intel (intel64) and Apple Silicon(arm64) hardware for macOS and software. Only unmodified iOS/iPadOS/tvOS is supported.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request an invitation by opening a help desk ticket at  help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf,  go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
Required Jamf Pro Implementation of Endpoint Protection Standard – go.ncsu.edu/jamfeps
JAMF Pro Cheat Sheet at go.ncsu.edu/jamfcheat for details on common configuration management tasks
WWDC 2023 – free virtual w/public keynote June 5-9, 2023
    www.apple.com/newsroom/2023/03/apples-worldwide-developers-conference-returns-june-5/
JNUC 2023- will be held in Austin, TX- Sep. 19-21, 2023     community.jamf.com/t5/jamf-nation-user-conference/jamf-nation-user-conference-2023-registration-is-open/td-p/283510
Jamf Spring Event – Apr 25, 2023 @1000 eastern  reg.rainfocus.com/flow/jamf/2023essenjamf/landing/page/page

Training – 5 min

Virtual Quick Start Jamf Pro at NCSU course – 1 Hour – available by scheduling Everette at calendly.com/ncsuega

Hands On only:

OIT-Managing Apple Devices with Jamf Pro TBA HLB B3
reporter.ncsu.edu/link/courseview?courseID=OIT-JPro01-JPro01&deptName=OIT&instanceID=000010

OIT-Jamf Pro Best Practices for Packagers TBA HLB B3
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro03-JPro03&deptName=OIT&instanceID=000009

OIT-Advanced Apple Device Management with Jamf Pro Apr 27, 2022 1:30-4:30 HLB B3
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro02-JPro02&deptName=OIT&instanceID=000009

Local Based Commercial Training – training.computertree.com/course/ 

JAMF Pro Training – www.jamf.com/training/ 

Apple Training – training.apple.com/it New Apple training courses that now cover iOS 16, iPadOS 16, and macOS Ventura are live for Certified IT Professional and Certified Support Professional

 

Service Updates – 30 min 

Configuration Management  – Jamf Pro production is currently 10.44.1, test on nccloudtest is 10.45.0, and the beta is 10.46B1. 
The next update of Jamf Pro production is Apr  12, 2023 after 1800. This update fixes a cross site and 3 other security issues.  See release notes at
learn.jamf.com/bundle/jamf-pro-release-notes-current/page/Resolved_Issues.html
Jamf Pro is the only approved Configuration Management system for macOS, iOS, iPadOS, and tvOS.  See oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/
Discussion

Patch Management – The Jamf App Catalog which has 123 titles.
learn.jamf.com/bundle/jamf-app-catalog/page/Release_History_App_Installers.html

Jamf Connect Updates – the latest version of Jamf Connect, 2.22.0.  See the release notes at
learn.jamf.com/bundle/jamf-connect-documentation-current/page/Release_History.html
NOTE: Jamf Connect 2.20.0 is last version that supports macOS 10.x
Discussion

XCreds Project – Release version – NCSU-Campus-XCreds_Build-3347_Version-2.2.pkg.
Dev version – PreBeta-XCreds_Build-3504_Version-2.4.pkg fixes issues where NCSU EDURoam does not stabilize before password sync check is done.
Info: github.com/twocanoes/xcreds/releases/
See go.ncsu.edu/jamfcheat#xcreds and go.ncsu.edu/jamfcheat#jc for implementation details.

Backup for Endpoints – CrashPlan version 11.0.1.28 is production New macOS PPPC profiles are need to update to the new CrashPlan developer Id. For details see:
support.crashplan.com/hc/en-us/articles/8695023896845-Grant-CrashPlan-permissions-to-macOS-devices                                                                                                                          
NOTE: All updates to existing clients are pushed from the web service.
For NEW installs only, use the package in JAMF is “NCSU-Campus_CrashPlan-11.0.1.28.pkg” The “NCSU-Campus-Install Code42CrashPlan License and Config.pkg” is required in the policy as before for new installs. 

Internet Recovery – No change
https://support.apple.com/en-us/HT204904.
Also see: https://mrmacintosh.com/restore-macos-firmware-on-an-apple-silicon-mac-boot-to-dfu-mode/

Software Packaging
Working on MatLab 2023a.  Other needs?

AntiMalware – No Change
DetectX Swift 1.0983 (universal) is still available. See oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/   
For Sites that have paid for a Crowdstrike Falcon license use NCSU-OIT-Crowdstrike-6.4.155.03.pkg for new installs.  Patching is done directly from the MCNC Crowdstike server.   Note that a PPPC configuration profile is needed for silent installation on devices with non-admin users.  See details at:
help.redcanary.com/hc/en-us/articles/4535994057879-How-to-Manually-Create-a-Jamf-Pro-Configuration-Profile-for-all-CrowdStrike-macOS-Sensor-Versions

Apple School Manager – No change. REMINDER Make sure you *unassign* any devices you have sent to surplus.

Endpoint Protection Standard  – Required Jamf Pro Implementation of Endpoint Protection Standard is at  go.ncsu.edu/jamfeps  

— 

Reminder about Staff Senate Computer Loan Program- 5 min
Just a reminder that if you have laptops(not desktops or iPads) that are at the end of their life cycle please consider donating them to the Staff Senate Computer Loan Program see details at:
staffsenate.ncsu.edu/initiatives/computer-loan-program/
Discussion

Jamf Pro Issues Update –  20 min
Update on the Jamf Pro issues we have seen over the past few weeks.  The root cause for the inability to add macOS devices to Static Groups, Profiles and Policies was a partial deletion of a macOS device record.  Jamf Pro uses 2 tables to store macOS device information and the device was deleted from one and not the other.  This was fixed by using a Mass Action command to delete the device and the problem was immediately fixed.  There were also about 50 duplicate macOS device records from 2015-1017 removed. 
Be aware of PI111181 – iOS/iPadOS devices with duplicate UUIDs will not show up in the web GUI.  This issue is open and is caused when using a OSUpdate mass action with the InstallASA option (force install).  This means if a Jamf Mass Action to force an update to iOS immediately is used the iOS/iPadOS device may disappear from the web GUI because the UUID is duplicated.  This PI is open with no time for the fix available.
We will now update JAMF Pro on nc.jamfcloud.com to version 10.45 on Wed Apr 12, 2023 between 1800 and 2345.
Discussion

Q&A – 15 min
You ask we try to answer 

Next meeting:
MacTech – Tue. May 10, 2023  In person/Zoom hybrid
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.