Body
NEW EMPLOYEE APPLE DEVICE SETUP
This article provides documentation regarding the Apple device setup for onboarding College employees. It does not apply to classroom/lab devices or college-issued iPhones.
JAMF PRO ENROLLMENT
Ensure the device is in Jamf Pro. Under either Computers (for iMacs, Mac Pro, Mac Mini, Mac Studio, Macbook Pro, and Macbook Air) or Devices (for iPad Pro and iPad Air), click Search Inventory and enter the device serial number. If the device cannot be found, please check with DST Manager to ensure that it has been transferred from Apple School Manager.
Click on the device, on the Inventory tab, under User and Location, click edit, and fill in employee information. The Username, Department, Building, and Room must be entered correctly for inventory purposes and to deploy the right applications.
Under Department drop-down field, select Admin (Employee) - this key allows Jamf to deploy a list of essential employee apps for this device. Click to save and, if possible, test the device before delivery to ensure all applications are present under Self-Service.
SET UP GLOBALPROTECT VPN
Once the device is delivered or has been set up in the employees' office, some software and shared drives will need to be configured (this will need approval and a separate ticket from the supervisor).
For Ipad Pro and Ipad Air, the user will be provided with a temporary password (2024) to log into the device - please have them change this code. The user will also need their AppleID, it can be setup later but will be needed to download and install apps from the App Store.
For iMacs, Mac Pro, Mac Mini, and Mac Studio, 
(i.e. to download and install an app or make valid system changes) using the LAdmin account. Please see a Jamf administrator for information regarding the LAdmin user and password. Log into the device using LAdmin.
Once logged in, go to System Preferences, Users & Groups, click the padlock icon to unlock admin access, and click on the + plus sign to add the new account. Fill in the information and select Administrator for the new account; note, this is not the same as their AD/SSO account.
GlobalProtect can then be configured to allow mapping of their shared drive/s and the use of Papercut or FollowMe-queue printing.
Connect to either PGCC-AIR or PGCC-GUEST. The user will enter an email address in order to gain access to the Internet.
Click on the GlobalProtect Icon on the Status bar, click Get Started, and enter the portal address (pgccvpn1.pgcc.edu).
Enter the username (do not include @pgcc.edu) and password. GlobalProtect will update its status once it is connected or if it has other issues that need to be resolved, such as the user's inclusion in the GlobalProtect user list. Please see the GlobalProtect administrator for more information.
MAP SHARED DRIVE ACCESS
Once the device has network access, perform the shared drive mapping using the SMB protocol by clicking on Go on the Menu bar then Connect to Server…
At the prompt enter the UNC path for both the S: (smb://lgchpnunity01/Admin_share/Share)
and P: (smb://lgchpnunity01/admin_apps) drives.
The user will need to enter their credentials as a Registered User and optionally save this information on their keychain (so that the mapping will persist upon system restart).
Additional drives can be added depending on user request and supervisor-approved access.
INSTALL AND CONFIGURE PAPERCUT/FOLLOWME-QUEUE PRINTING
To install and configure Papercut (FollowMe-queue) printing refer to the AskPGCC KBA instructions at "https://ask.pgcc.edu/TDClient/1778/Portal/KB/ArticleDet?ID=89348".