MacTech 05092023

MacTech Groups Agenda
Tue, May 9, 2023
2:30 to 4:30 pm
In person Room B16-B Hillsborough Building

Announcements – 5 min 

OIT only supports macOS 11.6.7 or newer after Dec 31, 2022 
NOTE: Many vendors are dropping support for 10.x versions of macOS.  If there is hardware that can not update to macOS 11 or newer, it is time to plan for replacement.
Status page for services see
OIT Macintosh Support Web Site for updates.
Slack group #macintosh
Apple Sales: Paul & Sys Eng: Dave
Vintage and Obsolete Apple Products:
Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
Antivirus for university owned devices –
Unity MultiUser Workflow uses XCreds with local home directory  See
OIT supports only Apple branded Intel (intel64) and Apple Silicon(arm64) hardware for macOS and software. Only unmodified iOS/iPadOS/tvOS is supported.
Please remember to verify prices at with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request an invitation by opening a help desk ticket at Must login to GSX monthly!!
JAMF Pro Enterprise service, and for details
Required Jamf Pro Implementation of Endpoint Protection Standard –
JAMF Pro Cheat Sheet at for details on common configuration management tasks
WWDC 2023 – free virtual w/public keynote June 5-9, 2023
JNUC 2023- will be held in Austin, TX- Sep. 19-21, 2023
Jamf Spring Event – Apr 25, 2023 @1000 eastern

Training – 5 min

Virtual Quick Start Jamf Pro at NCSU course – 1 Hour – available by scheduling Everette at

Hands On only:

OIT-Managing Apple Devices with Jamf Pro Jun 29, 2023  1:30-4:30 HLB B3

OIT-Jamf Pro Best Practices for Packagers TBA HLB B3

OIT-Advanced Apple Device Management with Jamf Pro Aug 10, 2023 1:30-4:30 HLB B3

Local Based Commercial Training – 

JAMF Pro Training – 

Apple Training –  – Certified IT Professional and Certified Support Professional


Service Updates – 30 min 

Configuration Management  – Jamf Pro production is currently 10.46.0, test on nccloudtest is 10.46.0, and the beta is 10.47B1. 
Jamf Pro is the only approved Configuration Management system for macOS, iOS, iPadOS, and tvOS.  See

Patch Management – The Jamf App Catalog which has 124 titles.

Jamf Connect Updates – the latest version of Jamf Connect, 2.23.0.  See the release notes at
NOTE: Jamf Connect 2.20.0 is last version that supports macOS 10.x
See for implementation details.

XCreds Project – Release version -NCSU-Campus-XCreds-3.0.3607.pkg.
This version requires a free license configuration profile.  See
The license for XCreds is available for the entire campus use at no cost and will remain so.
See for implementation details.

Backup for Endpoints – CrashPlan version is production
macOS PPPC profiles for the new CrashPlan developer see:                                                                                                                          
NOTE: All updates to existing clients are pushed from the web service.
For NEW installs only, use the package in JAMF is “NCSU-Campus_CrashPlan-” The “NCSU-Campus-Install Code42CrashPlan License and Config.pkg” is required in the policy as before for new installs. 

Internet Recovery – No change
Also see:

Software Packaging
Now available in Jamf Pro: MatLab 2023a and SPSS 29.

AntiMalware – No Change
DetectX Swift 1.0983 (universal) is still available. See   
For Sites that have paid for a Crowdstrike Falcon license use NCSU-OIT-Crowdstrike- for new installs.  Patching is done directly from the MCNC Crowdstike server.   Note that a PPPC configuration profile is needed for silent installation on devices with non-admin users.  See details at:

Apple School Manager – No change. REMINDER Make sure you *unassign* any devices you have sent to surplus.

Endpoint Protection Standard  – Required Jamf Pro Implementation of Endpoint Protection Standard is at  


Jamf Spring Event Recap – 15 min
Jamf announced several interesting features for release in Jamf Pro “this summer” (I took this as before or at JNUC 2023). A good summary is at  There are many security related products coming soon and they demonstrated tight integration with OIDC SSO provider Okta and Jamf Connect with others to follow (MS announced the same day their Enterprise Single Sign On Extension is out of beta and available).  However, the 3 features with the most impact on us are: 1) the option to distribute App Installer titles via Self Service. Once a user installs the application, App Installers will continue to keep that app title automatically up-to-date with the latest version 2) automated solution to create and manage unique local administrator passwords per each managed Mac with Jamf Pro. This is Local Administrator Password Solution functionality that escrows and rotates passwords for a local administrator account in Jamf Pro, and 3) built-in screen sharing with no 3rd party client required.

Jamf Pro Update – 10 min
Nested Smart Groups Cleanup – Thank you to those who worked on cleaning up nested groups.  Jamf Support recommends that Smart Groups not be nested inside other Smart Groups and that Smart groups contain no more than 10-12 criteria. When using serial numbers please make a Static group instead.

Apple Rapid Security Response(RSR)  –  10 min
What is an RSR?
Can RSR be managed like other software updates? Yes
Can our Jamf Pro manage and report on RSRs? Yes
Be sure to confirm the Restrictions and Software Updates options in your configuration profiles.

Q&A – 15 min
You ask we try to answer 

Next meeting:
MacTech – Tue. Jun 13, 2023  In person/Zoom hybrid
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.