MacTech Groups Agenda
Tue, Oct 13, 2020
3:00 to 5:00 pm
meet.google.com/aie-ypji-pqd
Announcements – 5 min
OIT only supports macOS 10.14.6 or newer
Status page for jamfcloud.com services see http://status.jamfsoftware.com
OIT Macintosh Support Web Site go.ncsu.edu/mac for updates.
Slack group ncstateit.slack.com #macintosh
Apple Sales: Paul Petrogeorge-paulpetro@apple.com & Sys Eng: Dave Andersen-andersen1@apple.com
macOS versions that shipped with Intel Hardware: support.apple.com/kb/HT1159
Vintage and Obsolete Apple Products: support.apple.com/kb/HT1752
Apple Education Support Line 800-800-2775 use this number only. Always verify Apple Care Coverage.
Antivirus for university owned devices – go.ncsu.edu/antivirus
Unity Macintosh MultiUser Workflow uses NoLoAD configuration with local home directory at /Users/$uid$
OIT supports only Apple, Intel (i386) hardware for Mac OS and software. Only unmodified iOS is supported.
Please remember to verify prices at www.apple.com/education/pricelists/ with NC State Marketplace
Authorized NC State personnel wanting to get training and tools for Apple Certified Technician should request invitation by opening a help desk ticket at help@ncsu.edu Must login to GSX monthly!!
JAMF Pro Enterprise service go.ncsu.edu/jamf, go.ncsu.edu/jamfinfo and go.ncsu.edu/uwc for details
UNC CAUSE 2020 is still going on and sessions are available at 2020unccause.sched.com
Training – 5 min (any course available via Meet/Zoom upon request)
- This is the third time I have this problem. The first time I just did a clean install of Big Sur, but obviously I can’t do that every time. The second and, now, the third time, I just run the update from the terminal.
- I've tried to install Big Sur, in a separate volume APFS, but the Mac go in boot loop for entire night. I've tried many times, but it's impossible to solve.
- 8GB is OK, but I don't think I could ever happily spec it in a machine where it couldn't be upgraded. It's counter intuitive to my brain I'd buy a laptop with the same amount of ram in 2019 as the one I did back.
- SystHist is a small app that analyzes your Mac and finds complete records of all the installed system and security updates. It even includes silent updates, and it provides you with details about every file that has been modified. View all updates installed on your Mac.
SystHist – lists full system and security update installation history SystHist is a clean and simple app which tells you all the OS X/macOS system and security updates which have been installed on that Mac. Known Issues: Support pages: Like this: MacOs. Installer Windows 7, 8 ou 10 en mode UEFI - Le Crabe Info.
OIT-iOS Mobile Device Security – TBA reporter.ncsu.edu/link/courseview?courseID=OIT-iOSMob-Security&deptName=OIT
OIT-Managing Apple Devices with Jamf Pro – Request – reporter.ncsu.edu/link/courseview?courseID=OIT-JPro01-JPro01&deptName=OIT
OIT-Jamf Pro Best Practices for Packagers – Request – reporter.ncsu.edu/link/courseview?courseID=OIT-JPro03-JPro03&deptName=OIT
OIT-Advanced Apple Device Management with Jamf Pro – Request reporter.ncsu.edu/link/courseview?courseID=OIT-JPro02-JPro02&deptName=OIT
CrashPlan for Sub-Org Administrators – Request – reporter.ncsu.edu/link/courseview?courseID=OIT-CPlan1-CPlan1&deptName=OIT
Local Based Commercial Training – training.computertree.com/course/
JAMF Pro Training – www.jamf.com/training/
Service Updates – 30 min
Configuration Management – Jamf Pro production is 10.23.0 Jamf Pro 10.24.2 in test on nccloudtest.jamfcloud.com and will be upgraded to 10.25.0 on Oct 24, 2020 Jamf Pro 10.25b2 is the latest beta.
The USWCA Team is ready to test 10.25.0 and will likely skip 10.24.1. See the release notes for 10.25.0 at docs.jamf.com/10.25.0/jamf-pro/release-notes/What’s_New.html
Jamf Pro is the only approved Configuration Management system for macOS, iOS/iPadOS, and tvOS. See oit.ncsu.edu/it-security/eps-implementation/config-mgt-systems/
Patch Definition Management – Kinobi was purchased by JAMF Software. No change to our service this year.
Backup for Endpoints – The Code42 production service is at version 8.2.2. Some time between Oct 15 and Oct 30 Code42 will automatically be updated to version 8.5.0. See the release notes at https://support.code42.com/Release_Notes/Code42_app_version_8.5_release_notes
Existing clients should automatically update from the cloud service. Clients with version 7 will not upgrade but will continue to work. We have no control over this upgrade schedule. An updated installer for brand new, clean installs will be made available in Jamf Pro before Nov 1, 2020. The “NCSU-Campus-Install Code42CrashPlan License and Config.pkg” is still required in the policy as before for new installs.
Steven Shearer's 2018 Portrait Synthist
Internet Recovery – No change. https://support.apple.com/en-us/HT204904. NOTE: Internet Recovery as it exists today will not work with Apple Silicon devices and Apple Configurator may be required for a full nuke and pave in some cases.
Software Packaging – No change or update. Still seeing issues with package uploads from autopkg and having to fix manually.
AntiMalware – DetectX Swift is still available and should be installed see oit.ncsu.edu/help-support/apple/jamf-pro/detectx-setup-in-jamf-pro/ OIT AV internal team met Sep 18, 2020 but no changes were proposed or approved. There was general agreement that OIT wants to move towards best of breed protection for each type of device and not a single product. Unrelated, also note that Jamf has reduced the educational price of Jamf Protect to $12 per device per year with a minimum order of 25 seats of the System Office Jamf contract. For folks that might want additional information about Apple builtin antimalware software like GateKeeper, MRT, and Xprotect take a look at the silnite command line tool https://eclecticlight.co/lockrattler-systhist/
Sensitive Data Discovery – NCSU-Campus-Spirion10800.pkg still waiting for approval of 11.4.
Apple School Manager – There have been significant changes to the ASM interface. REMINDER: For device management ALWAYS use Edit Device Management and NOTHING ELSE!! See agenda item below. Apple has also enabled SSO and SCIM support for AZURE AD in this release. We are limited right now because the Apple Developer program has not updated to use Apple’s own, new login services so we can not move (GSX has) yet.
AppleCare for Enterprise – Still on hold pending Apple being able to add to MarketPlace.
Systistoctic Blood Pressure
Endpoint Protection Standard – Phase 2 deadline-Dec 31, 2020.
See Jamf Pro Cheat Sheet at: go.ncsu.edu/jamfcheat
—
Synthestruct
Changes to Apple School Manager – 15 min
Apple School Manager has a UI change which requires first searching for a device before using “Edit Device Management” to assign it to an MDM server. To “Unassign” a device one now has to set the MDM server to “None” at the very bottom of the pop-up list. Please pay attention to the number of devices you are operating on as you should never operate on thousands of devices!! As a reminder, you should always use ONLY “Edit Device Management” and nothing else. Demo and discussion.
Apple Updates and Releases – 30 min
Apple new hardware and software releases.
Discussion
Q&A – 15 min
You ask we try to answer
Next meeting:
Synthistatin Side Effects
MacTech – Tue. Nov 10, 2020 Virtual via Google Meet.
MacTech – 2nd Tuesday each month: Jan, Feb, Mar, Apr, May, Jun, Aug, Sep, Oct, Nov, Dec
MacTech does not meet in July.
Meetings usually held in B16-B Hillsborough Bld.
Please mark your calendar.