Service Desk Digest

ONID Password Changes Due 10/27/2021

At about 9:00am on Wednesday, 10/27/2021, the first round of ONID password resets are due. There are 16,000 accounts in this first round, and several thousand still need to change their password. IAM are monitoring these numbers as we get closer to the deadline. Past ticket counts indicate that about 2-3% of customers need assistance with password change, so we are currently estimating about 80 additional calls on Wednesday. Several of our full-time staff have their schedules blocked that morning to help with tickets, and IAM will be helping with tickets as needed that day, too.

Parent ticket: Parent: Password Changes, August-November 2021

Please use the ticket form called “ONID Password Assistance” when helping customers.

Note that Service Desk has the ability to do reset PINs for students now – we do not need to refer to Registrar. Please verify identity as usual.

Athletics Firewall Migration 10/28/2021

On Thursday, 10/28/2021 at 6:30am-7:30am, the Athletics workstation firewall will be migrated to new equipment. Customers may notice a very brief outage, but most should not be impacted. If there are any issues after the change that appear to be firewall related, please contact Andre Farque or Tyler Pruitt on Teams.

Parent ticket: https://oregonstate.teamdynamix.com/TDNext/Apps/425/Tickets/TicketDet?TicketID=18365483

“Defend the Macs” – Upcoming Apple Management Changes

On Monday, 10/4/2021, an announcement will be sent to all CN and Cosine customers about changes coming for management of OSU-owned Apple devices.

The announcement notifies customers of the following upcoming changes:

  • All Apple devices will be enrolled in Microsoft Defender for Endpoint (MDE) for antivirus/antimalware.
  • All Apple devices will be enrolled in JAMF for OS and software updates and inventory. (Note: most CN Macs are already in JAMF, but most Cosine and Hatfield computers are not.)
  • New Apple devices will be domain-joined and users will login with their ONID account.
  • On New Apple devices, users will no longer have local admin, except in specific cases.
  • The use of Apple IDs and applications that require Apple IDs will be minimized.

The announcement is going out as a heads up to customers. However, at this time we are not quite ready to join all Macs to Active Directory. In particular, there are some issues with domain joining Big Sur computers. The Infrastructure and Endpoint teams are working on this issue and hope to have it resolved soon.

As we setup new Macs (or “rebuild” existing Macs) we should make sure they have MDE installed, but do not need to domain join them yet. I hope to have an update on that by the end of next week.

I have started an internal FAQ for questions about the “Defend the Macs” project and upcoming changes to Apple device management – let me know what additional questions you have: https://oregonstate.teamdynamix.com/TDClient/1935/Portal/KB/ArticleDet?ID=134596