Middlebury

Difference between revisions of "Zero-Touch Deployment for Macs"

(redirect to TDX KB)
Tag: Replaced
 
Line 1: Line 1:
 +
Content for this wiki page has been moved to the TeamDynamix Knowledge Base:
  
=== '''<span style="font-size:larger">What is Zero-Touch?</span>''' ===
+
https://support.gmhec.org/TDClient/47/middlebury/KB/ArticleDet?ID=20
  
Zero-Touch deployment is a new method for provisioning College-issued, primary-user&nbsp;Mac computers. This method of deployment replaces&nbsp;the need for an ITS staff member&nbsp;to prepare computers before they are deployed to the client. With Zero-Touch, a computer can be delivered directly to a client without ever needing to be physically handled by ITS.
+
[[Category:TDXKB]]
 
 
&nbsp;
 
 
 
=== '''<span style="font-size:larger">How does it work?</span>''' ===
 
 
 
Apple has a program called Apple School Manager (ASM) which works in conjuction with any number of Mobile Device Management (MDM) systems. Middlebury College&nbsp;uses an application called Jamf Pro for MDM. When computers are enrolled into Apple School Manager, they become assigned to Middlebury College's Jamf Pro server.
 
 
 
When&nbsp;a Mac is powered on for the first time and gets an Internet connection, the first thing it does is establish a connection&nbsp;to Apple servers. Apple then directs the computer to make a connection with Middlebury's Jamf Pro server and&nbsp;then enrolls&nbsp;itself into the Jamf Pro inventory. After enrollment is complete, Jamf begins to push policies, profiles&nbsp;and software, thereby configuring it automatically. Once Zero-Touch completes, a Self Service application will open on the desktop providing the client with many options to install as the user sees fit.
 
 
 
&nbsp;
 
 
 
=== <span style="font-size:larger">'''Deployment steps'''</span> ===
 
 
 
*'''If on campus, please join the "MiddleburyCollege" wireless.'''
 
*'''If off campus, connect to your home wireless or wired network connection.'''&nbsp;
 
 
 
&nbsp;
 
 
 
To begin, remove the computer from its packaging. If using a laptop and depending on how long the computer has been sitting, it might be necessary to connect the included charger. On most laptops, opening the lid of the laptop will automatically start the computer. Otherwise press the start button as shown in the picture below. Note that the start button is located on the right side of the touch bar, just above the delete key.
 
 
 
<span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Once the computer is powered on, the Apple Setup Assistant will guide you.&nbsp; Following are the steps you are likely to see as of July 2021.&nbsp; Estimated times in parentheses are based on a fast Internet connection by a user familiar with macOS and Middlebury login screens.</span></span></span></span>
 
 
 
[[File:Start button.jpg|360x480px|Start button.jpg]]
 
 
 
&nbsp;
 
 
 
'''<u><span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Setup Assistant: Country or Region</span></span></span></span></u>'''
 
 
 
<span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Choose United States, or as appropriate.</span></span></span></span>
 
 
 
[[File:Country or Region.jpg|550x346px|Country or Region.jpg]]
 
 
 
&nbsp;
 
 
 
'''<u><span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Setup Assistant: Accessibility</span></span></span></span></u>'''
 
 
 
<span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Select as needed or click “Not Now” to continue.</span></span></span></span>
 
 
 
[[File:Accessibility.jpg|476x300px|Accessibility.jpg]]
 
 
 
&nbsp;
 
 
 
'''<u><span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Setup Assistant: Select Your Wi-Fi Network</span></span></span></span></u>'''
 
 
 
<span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Select “MiddleburyCollege” on campus or a trusted home network.&nbsp; You may plug into Ethernet instead if you prefer.</span></span></span></span>
 
 
 
[[File:Select Wi-Fi.jpg|463x290px|Select Wi-Fi.jpg]]
 
 
 
&nbsp;
 
 
 
'''<u><span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Setup Assistant: Remote Management (~1 minute)</span></span></span></span></u>'''
 
 
 
<span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Click “Continue” or follow the link to learn more about remote management.</span></span></span></span>
 
 
 
<span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">[[File:Remote management.jpg|458x288px|Remote management.jpg]]</span></span></span></span>
 
 
 
&nbsp;
 
 
 
'''<u><span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Setup Assistant: Single Sign-On</span></span></span></span></u>'''
 
 
 
<span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Log into Middlebury’s Microsoft Single Sign-On solution with your Middlebury email address and password, as well as Multi-Factor Authentication (if prompted).</span></span></span></span>
 
 
 
[[File:SSO-email address.jpg|505x318px|SSO-email address.jpg]]
 
 
 
[[File:SSO-enter password.jpg|505x318px|SSO-enter password.jpg]]
 
 
 
[[File:Approve sign-in request.jpg|505x318px|Approve sign-in request.jpg]]
 
 
 
&nbsp;
 
 
 
<span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Stay signed on?&nbsp; It is appropriate to say Yes when signing onto a personal computer or one assigned specifically for your use.</span></span></span></span>
 
 
 
[[File:Stay signed in.jpg|465x292px]]
 
 
 
&nbsp;
 
 
 
'''<u><span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Setup Assistant: Remote Management setup (~2 minutes)</span></span></span></span></u>'''
 
<p style="text-align:center" align="center"><span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">This window will provide you with progress of the setup steps.</span></span></span></span></p>
 
[[File:Remote management again.jpg|462x291px|Remote management again.jpg]]
 
 
 
&nbsp;
 
 
 
'''<u><span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Setup Assistant: Create a Computer Account</span></span></span></span></u>'''
 
 
 
<span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Note the Full name and Account name are already filled in based on your login, and that the account name is your full email address.&nbsp; Note that your email address will be required on your next login!&nbsp; Please enter your Middlebury email password two times here to set it for your macOS account.&nbsp; (Matching your passwords will provide improved access to services and keep your life simpler.)</span></span></span></span>
 
 
 
[[File:Create computer account.jpg|550x435px|Create computer account.jpg]]
 
 
 
&nbsp;
 
 
 
'''<u><span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Setup Assistant: Enable Location Services</span></span></span></span></u>'''
 
 
 
<span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">See “About Location Services” for more information.</span></span></span></span>
 
 
 
[[File:Enable location services.jpg|495x390px|Enable location services.jpg]]
 
 
 
&nbsp;
 
 
 
'''<u><span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Setup Assistant: Touch ID (~3 minutes)</span></span></span></span></u>'''
 
 
 
<span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">For devices with a fingerprint scanner, you may set this up as an alternative to entering your password for installations and other administrative tasks, or “Set Up Touch ID Later.”</span></span></span></span>
 
 
 
&nbsp;
 
 
 
'''<u><span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Post-Setup Assistant</span></span></span></span></u>'''
 
 
 
<span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Finally, you will arrive at the desktop. Self Service will automatically open for you on your first login. You may also be prompted to allow notifications for Jamf and Sophos.&nbsp;</span></span></span></span>
 
 
 
[[File:Notifications.jpg|left|287x191px|Notifications.jpg]]
 
 
 
&nbsp;
 
 
 
&nbsp;
 
 
 
&nbsp;
 
 
 
&nbsp;
 
 
 
&nbsp;
 
 
 
&nbsp;
 
 
 
<span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">There may be additional notifications as Sophos installs, and the computer will '''automatically reboot''' after five minutes.</span></span></span></span>
 
 
 
<span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">[[File:Reboot message.jpg|left|245x148px|Reboot message.jpg]]</span></span></span></span>
 
 
 
&nbsp;
 
 
 
&nbsp;
 
 
 
&nbsp;
 
 
 
&nbsp;
 
 
 
&nbsp;
 
 
 
<span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Upon your next login, encryption will be enabled to protect your data.&nbsp;</span></span></span></span>
 
 
 
[[File:Enable FV.jpg|273x265px|Enable FV.jpg]][[File:Enabling FV.jpg|273x265px|Enabling FV.jpg]]
 
 
 
<span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Once back at the desktop, the setup process is complete.</span></span></span></span>
 
 
 
<span style="font-size:10.5pt"><span style="line-height:107%"><span style="font-family:"><span style="color:#221100">Self Service should open automatically. Self Service can also be found by navigating to Applications/Utilities then double clicking on Self Service. Use the search box in the upper left corner of the Self Service window to search for desired items. Self Service provides installers for software and printers, as well as information on how to get applications outside of Self Service (e.g. MS Office and Adobe applications).</span></span></span></span>
 
 
 
[[File:Self Service.jpg|620x364px|Self Service.jpg]]
 
 
 
&nbsp;
 
 
 
At this point the computer is still loading applications in the background. One such application, Sophos Anti-Virus, will automatically download and install. It is important to note that there will be an automatic restart once Sophos has finished installing.&nbsp; &nbsp;
 
 
 
If Self Service isn’t already open, open it by navigating to Applications/Utilities then double click on Self Service.
 
 
 
Use the search box in the upper left corner of the Self Service window to search for desired items. Self Service provides installers for software and printers, as well as information on how to get applications outside of Self Service (e. g. MS Office and Adobe applications). &nbsp; &nbsp;
 
 
 
[[Category:Pages with broken file links]] [[Category:Hardware]] [[Category:Hardware Distribution]] [[Category:Helpdesk Documentation]] [[Category:Public Search]] [[Category:Zero touch]]
 

Latest revision as of 05:33, 19 July 2022

Content for this wiki page has been moved to the TeamDynamix Knowledge Base:

https://support.gmhec.org/TDClient/47/middlebury/KB/ArticleDet?ID=20

Powered by MediaWiki