MacTech Groups Agenda
Tue, May 9, 2023
2:30 to 4:30 pm
In person Room B16-B Hillsborough Building
or
https://ncsu.zoom.us/j/98050685794?pwd=bU9aQUVqaW5ydU5JS0k1bzA5V0Jqdz09
Announcements – 5 min
OIT only supports macOS 11.6.7 or newer after Dec 31, 2022
NOTE: Many vendors are dropping support for 10.x versions of macOS. If there is hardware that can not update to macOS 11 or newer, it is time to plan for replacement.
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity MultiUser Workflow uses XCreds with local home directory See go.ncsu.edu/jamfcheat#xcreds
OIT supports only Apple branded Intel (intel64) and Apple Silicon(arm64) hardware for macOS and software. Only unmodified iOS/iPadOS/tvOS is supported.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request an invitation by opening a help desk ticket at help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf, go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
Required Jamf Pro Implementation of Endpoint Protection Standard – go.ncsu.edu/jamfeps
JAMF Pro Cheat Sheet at go.ncsu.edu/jamfcheat for details on common configuration management tasks
WWDC 2023 – free virtual w/public keynote June 5-9, 2023
www.apple.com/newsroom/2023/03/apples-worldwide-developers-conference-returns-june-5/
JNUC 2023- will be held in Austin, TX- Sep. 19-21, 2023 community.jamf.com/t5/jamf-nation-user-conference/jamf-nation-user-conference-2023-registration-is-open/td-p/283510
Jamf Spring Event – Apr 25, 2023 @1000 eastern reg.rainfocus.com/flow/jamf/2023essenjamf/landing/page/page
Training – 5 min
Virtual Quick Start Jamf Pro at NCSU course – 1 Hour – available by scheduling Everette at calendly.com/ncsuega
Hands On only:
OIT-Managing Apple Devices with Jamf Pro Jun 29, 2023 1:30-4:30 HLB B3
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro01-JPro01&deptName=OIT&instanceID=000011
OIT-Jamf Pro Best Practices for Packagers TBA HLB B3
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro03-JPro03&deptName=OIT&instanceID=000009
OIT-Advanced Apple Device Management with Jamf Pro Aug 10, 2023 1:30-4:30 HLB B3
reporter.ncsu.edu/link/instanceview?courseID=OIT-JPro02-JPro02&deptName=OIT&instanceID=000010
Local Based Commercial Training – training.computertree.com/course/
JAMF Pro Training – www.jamf.com/training/
Apple Training – training.apple.com/it – Certified IT Professional and Certified Support Professional
Service Updates – 30 min
Configuration Management – Jamf Pro production is currently 10.46.0, test on nccloudtest is 10.46.0, and the beta is 10.47B1.
Jamf Pro is the only approved Configuration Management system for macOS, iOS, iPadOS, and tvOS. See oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/
Discussion
Patch Management – The Jamf App Catalog which has 124 titles.
learn.jamf.com/bundle/jamf-app-catalog/page/Release_History_App_Installers.html
Jamf Connect Updates – the latest version of Jamf Connect, 2.23.0. See the release notes at
learn.jamf.com/bundle/jamf-connect-documentation-current/page/Release_History.html
NOTE: Jamf Connect 2.20.0 is last version that supports macOS 10.x
See go.ncsu.edu/jamfcheat#jc for implementation details.
Discussion
XCreds Project – Release version -NCSU-Campus-XCreds-3.0.3607.pkg.
This version requires a free license configuration profile. See go.ncsu.edu/jamfcheat#xcreds
The license for XCreds is available for the entire campus use at no cost and will remain so.
See go.ncsu.edu/jamfcheat#xcreds for implementation details.
Backup for Endpoints – CrashPlan version 11.0.1.28 is production
macOS PPPC profiles for the new CrashPlan developer see:
support.crashplan.com/hc/en-us/articles/8695023896845-Grant-CrashPlan-permissions-to-macOS-devices
NOTE: All updates to existing clients are pushed from the web service.
For NEW installs only, use the package in JAMF is “NCSU-Campus_CrashPlan-11.0.1.28.pkg” The “NCSU-Campus-Install Code42CrashPlan License and Config.pkg” is required in the policy as before for new installs.
Internet Recovery – No change
https://support.apple.com/en-us/HT204904.
Also see: https://mrmacintosh.com/restore-macos-firmware-on-an-apple-silicon-mac-boot-to-dfu-mode/
Software Packaging
Now available in Jamf Pro: MatLab 2023a and SPSS 29.
AntiMalware – No Change
DetectX Swift 1.0983 (universal) is still available. See oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/
For Sites that have paid for a Crowdstrike Falcon license use NCSU-OIT-Crowdstrike-6.4.155.03.pkg for new installs. Patching is done directly from the MCNC Crowdstike server. Note that a PPPC configuration profile is needed for silent installation on devices with non-admin users. See details at:
help.redcanary.com/hc/en-us/articles/4535994057879-How-to-Manually-Create-a-Jamf-Pro-Configuration-Profile-for-all-CrowdStrike-macOS-Sensor-Versions
Apple School Manager – No change. REMINDER Make sure you *unassign* any devices you have sent to surplus.
Endpoint Protection Standard – Required Jamf Pro Implementation of Endpoint Protection Standard is at go.ncsu.edu/jamfeps
—
Jamf Spring Event Recap – 15 min
Jamf announced several interesting features for release in Jamf Pro “this summer” (I took this as before or at JNUC 2023). A good summary is at www.jamf.com/blog/2023-jamf-spring-event-recap/ There are many security related products coming soon and they demonstrated tight integration with OIDC SSO provider Okta and Jamf Connect with others to follow (MS announced the same day their Enterprise Single Sign On Extension is out of beta and available). However, the 3 features with the most impact on us are: 1) the option to distribute App Installer titles via Self Service. Once a user installs the application, App Installers will continue to keep that app title automatically up-to-date with the latest version 2) automated solution to create and manage unique local administrator passwords per each managed Mac with Jamf Pro. This is Local Administrator Password Solution functionality that escrows and rotates passwords for a local administrator account in Jamf Pro, and 3) built-in screen sharing with no 3rd party client required.
Discussion
Jamf Pro Update – 10 min
Nested Smart Groups Cleanup – Thank you to those who worked on cleaning up nested groups. Jamf Support recommends that Smart Groups not be nested inside other Smart Groups and that Smart groups contain no more than 10-12 criteria. When using serial numbers please make a Static group instead.
Discussion
Apple Rapid Security Response(RSR) – 10 min
What is an RSR? support.apple.com/en-us/HT201224
Can RSR be managed like other software updates? Yes
support.apple.com/guide/deployment/manage-rapid-security-responses-dep93ff7ea78/web
Can our Jamf Pro manage and report on RSRs? Yes
www.jamf.com/blog/jamf-supports-rapid-security-response/
Be sure to confirm the Restrictions and Software Updates options in your configuration profiles.
Discussion
Q&A – 15 min
You ask we try to answer
Next meeting:
MacTech – Tue. Jun 13, 2023 In person/Zoom hybrid
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.