MacTech 08082023

MacTech Groups Agenda
Tue, Aug 8, 2023
2:30 to 4:30 pm
In person Room B16-B Hillsborough Building

Announcements – 5 min 

  • OIT only supports macOS 12.x or newer after Dec 31, 2023 
    NOTE: Many vendors are dropping support for 10.x versions of macOS.  If there is hardware that can not update to macOS 12 or newer, it is time to plan for replacement.
    Status page for services see
    OIT Macintosh Support Web Site for updates.
    Slack group #macintosh
    Apple Sales: Paul & Sys Eng: Dave
    Vintage and Obsolete Apple Products:
    Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
    Antivirus for university owned devices –
    Unity MultiUser Workflow uses XCreds with local home directory  See
    OIT supports only Apple branded Apple Silicon(arm64) and Intel (intel64) hardware for macOS and software. Only unmodified iOS/iPadOS/tvOS is supported. NOTE: watchOS and xrOS are best effort with no official support.
    Please remember to verify prices at with NC State Marketplace
    Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request an invitation by opening a help desk ticket at Must login to GSX monthly!!
    JAMF Pro Enterprise service, and for details
    Required Jamf Pro Implementation of Endpoint Protection Standard –
    JAMF Pro Cheat Sheet at for details on common configuration management tasks
    JNUC 2023- will be held in Austin, TX- Sep. 19-21, 2023
    UNC CAUSE 2023- will be held in Winston Salem, NC – Oct. 25-27, 2023
    Everette on leave Aug 14-Sep1 – Use OIT_JAMF group in Service Now

Training – 5 min

Virtual Quick Start Jamf Pro at NCSU course – 1 Hour – available by scheduling Everette at

Hands On only:

OIT-Managing Apple Devices with Jamf Pro -Hands On Only Sep 28, 2023  1:30-4:30 HLB B3

OIT-Jamf Pro Best Practices for Packagers -Hands On Only Oct 24, 2023 HLB B3

OIT-Advanced Apple Device Management with Jamf Pro -Hands On Only Aug 10, 2023 1:30-4:30 HLB B3

OIT-Advanced Apple Device Management with Jamf Pro -Hands On Only Nov 7, 2023 1:30-4:30 HLB B3

JAMF Pro Training – 

Apple Training –  – Certified IT Professional and Certified Support Professional


Service Updates – 30 min 

Configuration Management  – Jamf Pro production is currently 10.48.1, test on nccloudtest is 10.48.1, and beta is 10.49.0B1.  We are doing on-going clean up of unused objects in the Jamf Pro database and working with Jamf support on several known product issues (PI). Please remove any unused Smart Groups and switch any Smart Groups that are not used in a Scope to an Advanced Report.
Jamf Pro is the only approved Configuration Management system for macOS, iOS, iPadOS, and tvOS.  See

Patch Management – The Jamf App Catalog which has 129 titles.

Jamf Connect Updates – the latest version of Jamf Connect, 2.25.0.  See the release notes at
NOTE: Jamf Connect 2.20.0 is last version that supports macOS 10.x

XCreds Project – Release version -NCSU-Campus-XCreds-3.0.3607.pkg.
We are seeing 2 issues sporadically on a few devices:
Note: XCreds requires a free, Campus wide, license configuration profile.
The license for XCreds is available for the entire campus use at no cost and will remain so.
See for implementation details.

Backup for Endpoints – CrashPlan version is in production, macOS PPPC see:                                                                                                                          
NOTE: All updates to existing clients are pushed from the web service.
For NEW installs only, use the package in JAMF is “NCSU-Campus-Install_CrashPlan-” The “NCSU-Campus-Install Code42CrashPlan License and Config.pkg” is required in the policy as before for new installs.  An installer for 11.1.0 will be available when we can get it.

Internet Recovery – No change
Also see:

Software Packaging
Any needs?

AntiMalware – No Change
DetectX Swift 1.0983 (universal) is still available. See   
For Sites that have paid for a Crowdstrike Falcon license use NCSU-Campus-Crowdstrike- for new installs.  Patching is done directly from the MCNC Crowdstike server.   Note that a PPPC configuration profile is needed for silent installation on devices with non-admin users.  See details at:

Apple School Manager – No change. REMINDER Make sure you *unassign* any devices you have sent to surplus.

Endpoint Protection Standard  – Required Jamf Pro Implementation of Endpoint Protection Standard is at  


macOS 14 and iOS/iPadOS 17 testing – 10 min
If you are not testing your Apple Management workflows with the latest beta releases from please start now. Anyone with a account can login to appleseed.  Also there are direct downloads at
Support for new macOS and iOS at Zero day is becoming the norm and if there is vendor lag for app support you need to know that before the public update is released.  Remember that starting in macOs 13 updated can no longer be deferred beyond 90 days  and non-admin users can update macOS and iOS regardless.

Jamf Issues and updates – 30 min
Variety of Jamf Pro issues we are following.  None are widespread but be aware:
a) clean up on Smart Groups, Poorly Scoped Configuration Profiles and Unused Packages continues.  Expect more emails on clean up
b) New PI112111 where too many Configuration Profiles are delivered too quickly and ADE fails during or at the end of setup assist.  Jamf is aware and it is scheduled to fix (no timeline) only seen 4 devices across the entire system so far.  Changing networks like moving to a hot spot or slower network seems to help in  some cases. Also some devices can recover by removing from PreStage, doing consumer setup assistant, then putting  back in prestage and doing:
sudo profiles renew -type enrollment
c) We discovered that on about Aug 1, 2023 the new JAMF LAPS feature had been enabled on No logs could be found by the UWCA Team or Jamf Support/Jamf Hosting to say who turned this on or exactly when.  Good news is the feature works.  We turned the feature off about 1000 on Fri Aug 4, 2023.   The side effect is that an unknown number of local admin accounts (uid 501) have had their password security rotated.  If this is an issue for anyone see this web page on how to use the API to find credentials
( or simply run a policy with the standard password change payload option.

Jamf Pro Clean up of Smart Groups and Configuration Profiles – 10 min
We need to continue to clean up Nested Smart Groups – Jamf Support has sent another list that Everette will get out.   We continue to battle a known issue with profiles that are scoped to either the wrong processor type (kernel extensions on ASi) or settings that can’t work on  User Approved MDM (ie must be ADE) . Jamf support also has another list that I am working thru to get associated with Sites and will send out when I can.

Autopkg clean up update  –  5 min
The autopkg clean up automation is on hold until Jamf can tell us if packages scoped to Patch Titles can safely be removed.  Clean up of unused packages based on recommendations from the Jamf Health Check is part of phase 3 of the unused object clean up we began in late July 2023. Please clean up any unused packages, Smart Groups and Configuration Profiles as soon as you can.

Q&A – 15 min
You ask we try to answer 

Next meeting:
MacTech – Tue. Sep 12, 2023  In person/Zoom hybrid
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.