MacTech Groups Agenda
Tue, Dec 12, 2023
2:30 to 4:30 pm
In person Room B16-B Hillsborough Building
or
https://ncsu.zoom.us/j/98050685794?pwd=bU9aQUVqaW5ydU5JS0k1bzA5V0Jqdz09

Announcements – 5 min 

OIT only supports macOS 12.x or newer after Dec 31, 2023 
NOTE: Many vendors are dropping support for 10.x versions of macOS.  If there is hardware that can not update to macOS 12 or newer, it is time to plan for replacement.
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity MultiUser Workflow uses XCreds with local home directory  See go.ncsu.edu/jamfcheat#xcreds
OIT supports only Apple branded Apple Silicon(arm64) and Intel (intel64) hardware for macOS and software. Only unmodified iOS/iPadOS/tvOS is supported. NOTE: watchOS and xrOS are best effort with no official support.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request an invitation by opening a help desk ticket at  help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf,  go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
Required Jamf Pro Implementation of Endpoint Protection Standard – go.ncsu.edu/jamfeps
JAMF Pro Cheat Sheet at go.ncsu.edu/jamfcheat for details on common configuration management tasks
UNC CAUSE Apple Managers SIG – Virtual Meeting Jan 4, 2024

Training – 5 min

Virtual Quick Start Jamf Pro at NCSU course – 1 Hour – available by scheduling Everette at calendly.com/ncsuega

Hands On only: (any of these can be scheduled at other times w/ Everette)

OIT-Managing Apple Devices with Jamf Pro -Hands On Only Feb 22, 2024 1:30-4:30 HLB B3
reporter.ncsu.edu/link/courseview?courseID=OIT-JPro01-JPro01&deptName=OIT

OIT-Jamf Pro Best Practices for Packagers -Hands On Only Mar 18, 2024 HLB B3 1:30-4:30 HLB B3
reporter.ncsu.edu/link/courseview?courseID=OIT-JPro03-JPro03&deptName=OIT

OIT-Advanced Apple Device Management with Jamf Pro -Hands On Only Apr 25, 2024 1:30-4:30 HLB B3
reporter.ncsu.edu/link/courseview?courseID=OIT-JPro02-JPro02&deptName=OIT

JAMF Pro Training – www.jamf.com/training/ 

Apple Training – training.apple.com/it  – Certified IT Professional and Certified Support Professional

 

Service Updates – 30 min 

Configuration Management  – Jamf Pro production is currently 11.0.1, test on nccloudtest is 11.1.1, and beta is 11.2.0B1.  

• Note that Jamf is in process of releasing version 2.0 of their Jamf Cloud Distribution Service (JCDS) which houses all installation packages.  No date is set to update our service yet but release notes are at www.jamf.com/resources/product-documentation/jamf-cloud-distribution-service-release-notes/
• Call to vote has been issued for Dec 20, 2023 update to version 11.1.1 due to known security issues.   Please respond if you have not.

Jamf Pro is the only approved Configuration Management system for macOS, iOS, iPadOS, and tvOS.  See oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/
Discussion

Patch Management – The Jamf App Catalog which has 158 titles.
learn.jamf.com/bundle/jamf-app-catalog/page/Release_History_App_Installers.html

Jamf Connect Updates – the latest version of Jamf Connect, 2.29.0.  See the release notes at
learn.jamf.com/bundle/jamf-connect-documentation-current/page/Release_History.html
NOTE: Jamf Connect 2.20.0 is last version that supports macOS 10.x
Discussion

XCreds Project – No change. Latest installer is NCSU-Campus-XCreds-3.2.5197.pkg in Jamf Pro Distribution.
Note: XCreds requires a free, Campus wide, license configuration profile.
The license for XCreds is available for the entire campus use at no cost and will remain so.
See go.ncsu.edu/jamfcheat#xcreds for implementation details.

Backup for Endpoints – CrashPlan version 11.2.0.520 is in production
See release notes at support.crashplan.com/hc/en-us/categories/9394630552205-Release-notes
To create macOS PPPC profile see:
support.crashplan.com/hc/en-us/articles/8695023896845-Grant-CrashPlan-permissions-to-macOS-devices                                                                                                                          
NOTE: All updates to existing clients are pushed from the web service.
For NEW installs only, use the package in JAMF is “NCSU-Campus-Install CrashPlan_11.2.0.pkg” The “NCSU-Campus-CrashPlan License.pkg” is required in the policy as before for new installs.  

Internet Recovery – No change
https://support.apple.com/en-us/HT204904.
Also see: https://mrmacintosh.com/restore-macos-firmware-on-an-apple-silicon-mac-boot-to-dfu-mode/

Software Packaging
Added AutoCAD 2024 and Foxit (name user license).  If packaging is needed open a call in the Service Now group OIT-JAMF

AntiMalware – No Change
DetectX Swift 1.0983 (universal) is still available. See oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/   
For Sites that have paid for a Crowdstrike Falcon license use NCSU-Campus-Crowdstrike_Falcom_Sensor-7.05.176.03.pkg for new installs.  Patching is done directly from the MCNC Crowdstike server.   Note that a PPPC configuration profile is needed for silent installation on devices with non-admin users.  See details at:
help.redcanary.com/hc/en-us/articles/4535994057879-How-to-Manually-Create-a-Jamf-Pro-Configuration-Profile-for-all-CrowdStrike-macOS-Sensor-Versions

Apple School Manager – No change. REMINDER Make sure you *unassign* any devices you have sent to surplus.

Endpoint Protection Standard  – Required Jamf Pro Implementation of Endpoint Protection Standard is at  go.ncsu.edu/jamfeps  

— 

Production update of nc.jamfcloud.com to 11.1.1 on Wed Dec 20, 2023 after 1800 – 15 min
Jamf Hosting will update our production Jamf Pro service to version 11.1.1 after 1800 eastern on Dec 20, 2023 to patch for a know security issue and add new features.  See release notes at:
https://www.jamf.com/resources/product-documentation/jamf-pro-release-notes/
And
https://learn.jamf.com/bundle/jamf-pro-release-notes-11.1.1/page/New_Features_and_Enhancements.html
This is tight up against the Christmas break but due to the security update in the last .1 we need to move quickly.
Discussion

Apple Authentication Domain Recovery Project Update – 15 min
OIT is assuming the authentication domain @ncsu.edu with Apple on Feb 20, 2024.  A change request and notification will go to OIT CAB on Feb 6, 2024.  This is being done to allow the use of enterprise Apple Ids at a later date.  Communication from OIT will go out in early 2024 with instructions for changing private iCloud/iTunes accounts.  If anyone is using an @ncsu.edu for managed devices there will be an impact.
Discussion

Apple School Manager Apple ID Changes  – 10 min
On Wed Jan 10, 2024 about 0900 Apple School Manager login names will change to end in @appleid.ncsu.edu.  Right now only about 40 Ids will be affected since most folks already have ASM Id’s of the form <ncsu_id>@appleid.ncsu.edu.  When in place the new form of the id will be required to login to both ASM and appleseed.apple.com. The passwords and any related ASM assets will remain the same.
Discussion.

Apple Rep Campus Visits – Dave Andersen – 5 min

Our local Apple reps are looking for groups to visit to learn about cool and interesting things going on in your area.
Dave will fill in details.
Discussion.

Q&A – 15 min
You ask we try to answer 

Next meeting:
MacTech – Tue. Jan 10, 2024  In person/Zoom hybrid
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld. when in person
Please mark your calendar.