MacTech 01092024

MacTech Group Agenda
Tue, Jan 9, 2024
2:30 to 4:30 pm
https://ncsu.zoom.us/j/98050685794?pwd=bU9aQUVqaW5ydU5JS0k1bzA5V0Jqdz09

Announcements – 5 min OIT only supports macOS 12.x or newer after Dec 31, 2023 
NOTE: Many vendors are dropping support for 10.x versions of macOS.  If there is hardware that can not update to macOS 12 or newer, it is time to plan for replacement.
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Applecare Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity MultiUser Workflow uses XCreds with local home directory  See go.ncsu.edu/jamfcheat#xcreds
OIT supports only Apple branded Apple Silicon(arm64) and Intel (intel64) hardware for macOS and software. Only unmodified iOS/iPadOS/tvOS is supported. NOTE: watchOS and xrOS are best effort with no official support.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request an invitation by opening a help desk ticket at  help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf,  go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
Required Jamf Pro Implementation of Endpoint Protection Standard – go.ncsu.edu/jamfeps
JAMF Pro Cheat Sheet at go.ncsu.edu/jamfcheat for details on common configuration management tasksTraining – 5 minVirtual Quick Start Jamf Pro at NCSU course – 1 Hour – available by scheduling Everette at calendly.com/ncsuegaHands On only: (any of these can be scheduled at other times w/ Everette)OIT-Managing Apple Devices with Jamf Pro -Hands On Only Feb 22, 2024 1:30-4:30 HLB B3
reporter.ncsu.edu/link/courseview?courseID=OIT-JPro01-JPro01&deptName=OITOIT-Jamf Pro Best Practices for Packagers -Hands On Only Mar 18, 2024 HLB B3 1:30-4:30 HLB B3
reporter.ncsu.edu/link/courseview?courseID=OIT-JPro03-JPro03&deptName=OITOIT-Advanced Apple Device Management with Jamf Pro -Hands On Only Apr 25, 2024 1:30-4:30 HLB B3
reporter.ncsu.edu/link/courseview?courseID=OIT-JPro02-JPro02&deptName=OITJAMF Pro Training – www.jamf.com/training/ (Dec 2023 updated for macOS 14, iOS 17, &iPad OS17)Apple Training – training.apple.com/it  – Certified IT Professional and Certified Support Professional

 

Service Updates – 30 min 

Configuration Management  – Jamf Pro production is currently 11.1.3, test on nccloudtest is 11.1.3, and beta is 11.2.0B2.  Jamf Cloud Distribution Service (JCDS) 2.0 update expected before June 2024
watch: www.jamf.com/resources/product-documentation/jamf-cloud-distribution-service-release-notes/
Jamf Pro is the only approved Configuration Management system for macOS, iOS, iPadOS, and tvOS.  See oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/
Discussion

Patch Management – The Jamf App Catalog which has 158 titles.
learn.jamf.com/bundle/jamf-app-catalog/page/Release_History_App_Installers.html

Jamf Connect Updates – the latest version of Jamf Connect, 2.30.0.  See the release notes at
learn.jamf.com/bundle/jamf-connect-documentation-current/page/Release_History.html
NOTE: Jamf Connect 2.20.0 is last version that supports macOS 10.x
Discussion

XCreds Project Production 3.2.1.6002, Test 4.0.6203
https://twocanoes.com/products/mac/xcreds/history/
https://github.com/twocanoes/xcreds/commit/ff9dc64fea8e6f438755e1d72837fce4391d167c
Note: XCreds requires a free, Campus wide, license configuration profile.
The license for XCreds is available for the entire campus use at no cost and will remain so.
See go.ncsu.edu/jamfcheat#xcreds for implementation details.

Backup for Endpoints – CrashPlan Production 11.2.0.520 server and client
New 11.2.1 client has been announced but not shipped yet. See release notes at:
support.crashplan.com/hc/en-us/articles/20740478167053–CrashPlan-app-version-11-2-release-notes-
To create macOS PPPC profile see:
support.crashplan.com/hc/en-us/articles/8695023896845-Grant-CrashPlan-permissions-to-macOS-devices                                                                                                                          
NOTE: All updates to existing clients are pushed from the web service.
For NEW installs only, use the package in JAMF is “NCSU-Campus-Install CrashPlan_11.2.0.pkg” The “NCSU-Campus-CrashPlan License.pkg” is required in the policy as before for new installs.  

Internet Recovery – No change
https://support.apple.com/en-us/HT204904.
Also see: https://mrmacintosh.com/restore-macos-firmware-on-an-apple-silicon-mac-boot-to-dfu-mode/

Software Packaging
No change.  If packaging is needed open a call in the Service Now group OIT-JAMF

AntiMalware – No Change
DetectX Swift 1.0983 (universal) is still available. See oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/   
For Sites that have paid for a Crowdstrike Falcon license use NCSU-Campus-Crowdstrike-6.49.162.01.pkg for new installs.  Patching is done directly from the MCNC Crowdstike server.   Note that a PPPC configuration profile is needed for silent installation on devices with non-admin users.  See details at:
help.redcanary.com/hc/en-us/articles/4535994057879-How-to-Manually-Create-a-Jamf-Pro-Configuration-Profile-for-all-CrowdStrike-macOS-Sensor-Versions

Apple School Manager – No change. REMINDER Make sure you *unassign* any devices you have sent to surplus.

Endpoint Protection Standard  – Required Jamf Pro Implementation of Endpoint Protection Standard is at  go.ncsu.edu/jamfeps  

— 

Apple School Manager Id Change Jan 10, 2024 @1000  – 10 min
OIT will change the Apple School Manager login IDs to use <id>@appleid.ncsu.edu on Jan 10, 2024 as announced. About half already use this form and will not change.  This will not change the email notification or the assigned access in ASM.  When logging into appleseed.apple.com the new ASM Ids will be used.
Discussion.

Apple Vision Pro Release- 10 min
-Apple Vision Pro will be available starting at $3,499 (U.S.) with 256GB of storage. Pre-orders for Apple Vision Pro will begin on Friday, January 19, at 5 a.m. PST, with availability beginning Friday, February 2.
-Apple Vision Pro will be available at all U.S. Apple Store locations and the U.S. Apple Store online.
-ZEISS Optical Inserts — Readers will be available for $99 (U.S.), and ZEISS Optical Inserts — Prescription will be available for $149 (U.S.).
-Apple Vision Pro comes with a Solo Knit Band and Dual Loop Band — giving users two options for the fit that works best for them. Apple Vision Pro also includes a Light Seal, two Light Seal Cushions, an Apple Vision Pro Cover for the front of the device, Polishing Cloth, Battery, USB-C Charge Cable, and USB-C Power Adapter. 
-See www.apple.com/newsroom/2024/01/apple-vision-pro-available-in-the-us-on-february-2/
Discussion

Package Clean up in Jamf Pro – 10 min
OIT will begin an effort to clean up the 500+ unused packages we have in Jamf Pro over the next few weeks.  Jamf recommended in their health check last fall that we reduce these as much as possible to reduce our overall server load. There are still issues around determining if a package is not in use by patch policies so we will need to look closely at the lists Jamf Support sends us.
Please rename any packages you want deleted by adding DELETE- in front of the display name in Jamf Pro.
Also please make every effort to respond quickly to any list of packages sent out for review.
Thanks!
Discussion

Q&A – 15 min
You ask we try to answer 

Next meeting:
MacTech – Tue. Feb 13, 2024  In person/Zoom hybrid
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld. when in person
Please mark your calendar.