Employee - New - Mac

New Faculty or Staff Cascade

Imaging and/or Cascading Quick Links

Cascade Checklist

Checklist created to help with the cascade process.

Register the Mac

Before you unbox the Mac, register the Mac in GReg and update TDX Assets. If they are receiving a USB-C Mac, please register the Anker USB-C adapter. To find the MAC address of the Anker, please either use Network Preferences.

Step Two: Bootstrap the Mac

Bootstrapping is similar to imaging but we're only installing a base operating system and Managed Software Center. This makes bootstrapping really fast and allows us to update software and computer setup more easily.

  1. If using a brand new MacBook Pro (in box), no provisioning is necessary. Go to Step 3.
  2. Connect a provisioning drive to the Mac.
  3. Boot the Mac to Recovery Mode by powering on the Mac and holding down command+r
  4. Select Utilities --> Terminal
  5. Type the command /Volumes/macOS/run in the Terminal window.
  6. Terminal will ask which drive you'd like to bootstrap. Select the drive labeled Macintosh HD. If you don't see a drive labeled Macintosh HD you will need to partition the drive with Disk Utility first. Make sure to select the top, "parent" drive of the Mac. If you do not see the Apple SSD, click on the View option and choose "View All Devices" to select the Apple SSD. Click erase, name the drive Macintosh HD and leave other default settings.
  7. In Terminal: After you've selected the drive, Terminal will ask you if you want to erase the target volume before install. Type y and press return.

Step Three: Apply Configuration and Updates

Once the Mac has been provisioned, it will reboot and you will be presented with the macOS initial setup window. Follow the onscreen prompts.

Important: Make sure you see a screen that says "Remote Management" and "Gustavus Adolphus College can automatically configure your computer". If you don't see this screen the Mac will need to be moved to the correct MDM server. Any dutyperson should be able to move it for you if you provide them with the serial number of the Mac.

Wait about 10-15 seconds until the login screen shows the fields for username and password.

  1. Log into admin account
  2. Enable FileVault
  3. Big Sur only - Choose “Not Now” on Accessibility screen
  4. Run sudo jamf policy in terminal to force checkin. This will install apps and settings for the machine. Please let this run until it is finished. This will take approximately 10-20 min.
  5. If prompted, click OK for System Extension Blocked by HP Inc.
  6. Check to see if CrashPlan, Enterprise Connect, Google Chrome, and Office are installed.
  7. If not, run sudo jamf policy again

Step Four: Add user, install Printers & update/install other software

  1. Login as admin.
  2. Add user through System Preferences (Users and Groups). Click the + symbol to add user. Check allow user to administer computer. Set password to temporary password.
  3. Restart computer and log into computer as user.
  4. Use Software Center to install the printers.
  5. Use Software Center to install software that the user wants installed. Refer to ticket for specialized software requests.

Step Five: Set up Code42

  1. Reset the user's domain password via the tools page. Note the reset domain password in the fusion ticket. Also, enable DUO bypass so that the user doesn't receive a DUO prompt when you log them into crashplan.
  2. Open the Code42 app under their user.
  3. Open System Preferences and choose Security and Privacy.
  4. Navigate to the Privacy tab, and choose Full Disk Access from the left side panel. Check the box next to Code42 and falconhd.
  5. Back in Code42, sign in as the user using their Gustavus email address and their reset domain password and make sure crashplan starts backing up the machine (It should show the backup with a message that says "scanning backup selection Last Backup x minutes ago)

Step Six: Install iProjection

iProjection is replacing EasyMP, and is now in Software Center.

  1. After installation, open iProjection.
  2. Choose Advanced Connection Mode.
  3. Check the box to set the selected Connection Mode as default.
  4. Press OK.
  5. Connect to the Olin 133 or Olin 124 projector. When prompted to allow Screen Recording in System Settings, select yes. If Privacy Settings do not automatically open, navigate to System Preferences > Security & Privacy > Privacy tab. On the lefthand side panel, click Screen Recording.
  6. Check the box next to iProjection.

Step Seven: Mac New Employee Letter

Customize (replace the items in bold italic that are placeholders) and print a Mac New Employee Letter for each user user.

Troubleshooting

Retrieved from "https://gustavus.edu/gts/w/index.php?title=Employee_-_New_-_Mac&oldid=39312"