MacTech Groups Agenda
Tue, Nov 14, 2023
2:30 to 4:30 pm
In person Room B16-B Hillsborough Building
or
https://ncsu.zoom.us/j/98050685794?pwd=bU9aQUVqaW5ydU5JS0k1bzA5V0Jqdz09
Announcements – 5 min
OIT only supports macOS 12.x or newer after Dec 31, 2023
NOTE: Many vendors are dropping support for 10.x versions of macOS. If there is hardware that can not update to macOS 12 or newer, it is time to plan for replacement.
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity MultiUser Workflow uses XCreds with local home directory See go.ncsu.edu/jamfcheat#xcreds
OIT supports only Apple branded Apple Silicon(arm64) and Intel (intel64) hardware for macOS and software. Only unmodified iOS/iPadOS/tvOS is supported. NOTE: watchOS and xrOS are best effort with no official support.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request an invitation by opening a help desk ticket at help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf, go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
Required Jamf Pro Implementation of Endpoint Protection Standard – go.ncsu.edu/jamfeps
JAMF Pro Cheat Sheet at go.ncsu.edu/jamfcheat for details on common configuration management tasks
Training – 5 min
Virtual Quick Start Jamf Pro at NCSU course – 1 Hour – available by scheduling Everette at calendly.com/ncsuega
Hands On only: (any of these can be scheduled at other times w/ Everette)
OIT-Managing Apple Devices with Jamf Pro -Hands On Only Feb 22, 2024 1:30-4:30 HLB B3
reporter.ncsu.edu/link/courseview?courseID=OIT-JPro01-JPro01&deptName=OIT
OIT-Jamf Pro Best Practices for Packagers -Hands On Only Mar 18, 2024 HLB B3 1:30-4:30 HLB B3
reporter.ncsu.edu/link/courseview?courseID=OIT-JPro03-JPro03&deptName=OIT
OIT-Advanced Apple Device Management with Jamf Pro -Hands On Only Apr 25, 2024 1:30-4:30 HLB B3
reporter.ncsu.edu/link/courseview?courseID=OIT-JPro02-JPro02&deptName=OIT
JAMF Pro Training – www.jamf.com/training/
Apple Training – training.apple.com/it – Certified IT Professional and Certified Support Professional
Service Updates – 30 min
Configuration Management – Jamf Pro production is currently 11.0.1, test on nccloudtest is 11.0.1, and beta is 11.1.0B1. Note that Jamf is in process of releasing version 2.0 of their Jamf Cloud Distribution Service (JCDS) which houses all installation packages. No date is set to update our service yet but release notes are at www.jamf.com/resources/product-documentation/jamf-cloud-distribution-service-release-notes/
We continue to do on-going clean up of unused objects in the Jamf Pro database and are working with Jamf support on several known product issues (PI). Please remove any unused Smart Groups and switch any Smart Groups that are not used in a Scope to an Advanced Report. Please verify that any Configuration Profiles for kernel or system extensions have the correct exclusions based on the processor types they run on. Expect more clean up lists as we continue to make improvents. Jamf Pro is the only approved Configuration Management system for macOS, iOS, iPadOS, and tvOS. See oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/
Discussion
Patch Management – The Jamf App Catalog which has 156 titles.
learn.jamf.com/bundle/jamf-app-catalog/page/Release_History_App_Installers.html
Jamf Connect Updates – the latest version of Jamf Connect, 2.29.0. See the release notes at
learn.jamf.com/bundle/jamf-connect-documentation-current/page/Release_History.html
NOTE: Jamf Connect 2.20.0 is last version that supports macOS 10.x
Discussion
XCreds Project – No change. Latest installer is NCSU-Campus-XCreds-3.1.5084 in Jamf Pro Distribution.
Note: XCreds requires a free, Campus wide, license configuration profile.
The license for XCreds is available for the entire campus use at no cost and will remain so.
See go.ncsu.edu/jamfcheat#xcreds for implementation details.
Backup for Endpoints – CrashPlan version 11.2.0.520 is in production
See release notes at support.crashplan.com/hc/en-us/categories/9394630552205-Release-notes
To create macOS PPPC profile see:
support.crashplan.com/hc/en-us/articles/8695023896845-Grant-CrashPlan-permissions-to-macOS-devices
NOTE: All updates to existing clients are pushed from the web service.
For NEW installs only, use the package in JAMF is “NCSU-Campus-Install CrashPlan_11.2.0.pkg” The “NCSU-Campus-CrashPlan License.pkg” is required in the policy as before for new installs.
Internet Recovery – No change
https://support.apple.com/en-us/HT204904.
Also see: https://mrmacintosh.com/restore-macos-firmware-on-an-apple-silicon-mac-boot-to-dfu-mode/
Software Packaging
No change. If packaging is needed open a call in the Service Now group OIT-JAMF
AntiMalware – No Change
DetectX Swift 1.0983 (universal) is still available. See oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/
For Sites that have paid for a Crowdstrike Falcon license use NCSU-Campus-Crowdstrike-6.49.162.01.pkg for new installs. Patching is done directly from the MCNC Crowdstike server. Note that a PPPC configuration profile is needed for silent installation on devices with non-admin users. See details at:
help.redcanary.com/hc/en-us/articles/4535994057879-How-to-Manually-Create-a-Jamf-Pro-Configuration-Profile-for-all-CrowdStrike-macOS-Sensor-Versions
Apple School Manager – No change. REMINDER Make sure you *unassign* any devices you have sent to surplus.
Endpoint Protection Standard – Required Jamf Pro Implementation of Endpoint Protection Standard is at go.ncsu.edu/jamfeps
—
Apple Managed Software Updates in Jamf Pro – 5 min
We have been blocked by a Jamf Pro Product issue(PI) from enabling Apple Managed Software Updates. The short summary of the PI is that Jamf Pro instances that have more than 5k macOS devices (NCSU has 8K alone) will hang and then fail canceling any existing software update MDM commands(OS and App Store app updates) in progress when Apple Managed Software Update is turned on. The issue is being worked on actively but Jamf has not provided a timeline for the fix.
Discussion
UNC CAUSE Apple Managers SIG Meetings – 15 min
At UNC CAUSE 2023 the SIG managers met and decided to start more formal monthly meetings of the SIG. The kick off meeting will be hosted by ASU on Dec 7 at 1000 via Zoom. Proposed virtual meeting dates for 2024: Jan 4, Feb 1, Mar 7, Apr 4, May 2, Jun 6, July 11, Aug 1, Sep 5, Oct 3, Nov 7, Dec 5
All meetings will begin at 1000. Join the conversation at:
Slack- #sig-apple-managers on UNC CAUSE Slack https://unccause.slack.com/archives/C01AZSL5QPR
Email- sig-appleman@unccause.org Google Group mailto:sig-appleman+subscribe@unccause.org
Zoom- https://ncsu.zoom.us/j/91291000693?pwd=MHRpZlMyUUVzck0vamxBOXpkSHM3UT09
Discussion
Upcoming Apple School Manager Changes – 10 min
OIT is beginning to work on changes to current Apple School Manager login IDs to prepare for use of enterprise Apple Ids. Over the next few months all current ASM logins will change to use <id>@appleid.ncsu.edu. About half already use this form and will not change. This will not change the email notification or the assigned access in ASM. When logging into appleseed.apple.com the new ASM Ids will be used. Look for more details in the coming weeks.
Discussion.
New M3 Macs – Dave Andersen – 30 min
Our local Apple Systems Engineer will join us to present the latest Macs with M3 processors and hardware updates.
Discussion
Q&A – 15 min
You ask we try to answer
Next meeting:
MacTech – Tue. Dec 12, 2023 In person/Zoom hybrid
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld. when in person
Please mark your calendar.