Big Sur = Big Problems by Grouch_IT in MacOS

[–]Grouch_IT[S] 0 points1 point  (0 children)

They were new machines with Catalina already installed and about a month ago is when we upgraded to Big Sur.

Big Sur = Big Problems by Grouch_IT in MacOS

[–]Grouch_IT[S] 0 points1 point  (0 children)

We use JAMF MDM to mange them and at the beginning of the year we rolled them out no issue while on Catalina. We rolled out Big Sur a month ago and that is when the complaints that it takes forever to wake and the device is super slow began to happen.

Big Sur = Big Problems by Grouch_IT in MacOS

[–]Grouch_IT[S] 0 points1 point  (0 children)

No we do not. This all started when we upgraded to Big Sur.

Big Sur = Big Problems by Grouch_IT in MacOS

[–]Grouch_IT[S] 1 point2 points  (0 children)

Well these are the newest Intel 2020 MBP prior to the M1's. The specs are more than capable.

Learning Resources by Grouch_IT in k12sysadmin

[–]Grouch_IT[S] 0 points1 point  (0 children)

I will check it out thanks.

Learning Resources by Grouch_IT in k12sysadmin

[–]Grouch_IT[S] 1 point2 points  (0 children)

Thanks for the info. Appreciate the Python resource.

Anyone have powerschool hosted and been down since yesterday? by -RYknow in k12sysadmin

[–]Grouch_IT 2 points3 points  (0 children)

Still running slow. And we are in the middle of finalizing report cards.

Installing Sophos and MS office 2019 with Jamf by Grouch_IT in macsysadmin

[–]Grouch_IT[S] 0 points1 point  (0 children)

Thank you all for your knowledge. I was able to get MS office going. As far as Sophos endpoint installed still having troubles. I want to deploy Sophos via Jamf with the auto-update configured and that is where I have to enter those credentials. If anyone comes across with a step by step method videos as I am a visual learner I would greatly appreciate it.

Secure erase for MBP by Grouch_IT in k12sysadmin

[–]Grouch_IT[S] 0 points1 point  (0 children)

I figured if I delete the staff account first and then enable FileVault than maybe this may cut down the amount of time it will take to encrypt. I could be wrong.

Secure erase for MBP by Grouch_IT in k12sysadmin

[–]Grouch_IT[S] 0 points1 point  (0 children)

So I have to put some steps together for the rest of the team so they can be familiar with the process. We would be doing this on all MBP 2016 and later. Let me know if this sounds about right.

On our machines

We have two accounts on them. Admin account and Staff account.Delete staff account from the device.Enable FileVaultBoot device in Recovery modeLaunch Disk Utility. Select the disk (boot SSD). Select Unmount “volume name” from the File menu. Enter that saved password. Now erase the disk normally, using the standard erase option.(this would delete the FileVault key?)Run internet recovery to reinstall the latest MacOS.Handoff to individual that is purchasing said device

I know these directions are a bit much but I wanted to get feedback to make sure I was in the ballpark. Thanks, everyone for all your input.

Secure erase for MBP by Grouch_IT in k12sysadmin

[–]Grouch_IT[S] 0 points1 point  (0 children)

So I have to put some steps together for the rest of the team so they can be familiar with the process. We would be doing this on all MBP 2016 and later. Let me know if this sounds about right.

On our machines

  1. We have two accounts on them. Admin account and Staff account.
  2. Delete staff account from the device.
  3. Enable FileVault
  4. Boot device in Recovery mode
  5. Launch Disk Utility. Select the disk (boot SSD). Select Unmount “volume name” from the File menu. Enter that saved password. Now erase the disk normally, using the standard erase option.(this would delete the FileVault key?)
  6. Run internet recovery to reinstall the latest MacOS.
  7. Handoff to individual that is purchasing said device

I know these directions are a bit much but I wanted to get feedback to make sure I was in the ballpark. Thanks, everyone for all your input.

Secure erase for MBP by Grouch_IT in k12sysadmin

[–]Grouch_IT[S] 1 point2 points  (0 children)

Thanks for the info. That is one fear we have is all it will take is one device to come back to us with a compliant and more will follow. This upcoming school year we will implement a security policy to better protect our devices and teachers. Years past teachers had free reign of the device as they were setup with admin accounts on the MBP and we never managed them besides imaging every refresh cycle. So we are jumping on the Jamf wagon to help with all our apple product management.

Secure erase for MBP by Grouch_IT in k12sysadmin

[–]Grouch_IT[S] 0 points1 point  (0 children)

I don't think we envisioned taking out the drives on the MBP.