Skip to main content
Question

Block Mac OS Sonoma

  • September 20, 2023
  • 10 replies
  • 50 views

JamfAdmin2
Forum|alt.badge.img+6

Hello I am attempting to block the Mac OS Sonoma BETA my boss advised me that my restricted profiles i created are wrong i will post a picture of what i have done so far when i scope the restricted software to my test mac machine it always installs and downloads the sonoma beta not sure what i am doing wrong 

 

 

 

10 replies

dsavageED
Forum|alt.badge.img+8
  • New Contributor
  • September 21, 2023

Use a wild card gor the process name: Install macOS Sonoma*.app

Untick restrict exact process.


JamfAdmin2
Forum|alt.badge.img+6
  • Author
  • Contributor
  • September 21, 2023

Use a wild card gor the process name: Install macOS Sonoma*.app

Untick restrict exact process.


ok thank you for this and once i put in Install macOS Sonoma*.app and try to download the sonoma beta it will kill the process correct? 


dsavageED
Forum|alt.badge.img+8
  • New Contributor
  • September 21, 2023

It won't prevent the download, it will kill the app if you try and run it...


JamfAdmin2
Forum|alt.badge.img+6
  • Author
  • Contributor
  • September 21, 2023

It won't prevent the download, it will kill the app if you try and run it...


it did not work i was able to install the sonoma beta i am installing it when i go to settings and i put in my apple id and click on check for updates 

 

 


dsavageED
Forum|alt.badge.img+8
  • New Contributor
  • September 22, 2023

Then the beta process isn't running under the traditional name... You will need to open Activity Monitor to find the name of the actual process...


JamfAdmin2
Forum|alt.badge.img+6
  • Author
  • Contributor
  • September 22, 2023

were you able to find it on your end? 


ImAMacGuy
Forum|alt.badge.img+23
  • Esteemed Contributor
  • September 22, 2023

block InstallAssistant, that's what the last several OS"s have used.  That way it's blocking the process itself, so if they change the file name it will still catch the process name (which can't be changed)

 


JamfAdmin2
Forum|alt.badge.img+6
  • Author
  • Contributor
  • September 22, 2023

block InstallAssistant, that's what the last several OS"s have used.  That way it's blocking the process itself, so if they change the file name it will still catch the process name (which can't be changed)

 


i did that and was still able to download the sonoma beta ):

 

 


ImAMacGuy
Forum|alt.badge.img+23
  • Esteemed Contributor
  • September 22, 2023

you can download it, yes, but you can't run it.  I don't think you can block the actual download at jamf/device level, that would be blocking at the company firewall/proxy - but even that if the users take it home they would be able to download from their home internet.

 


Forum|alt.badge.img
  • New Contributor
  • May 31, 2025

It sounds like you're close, but the issue might stem from how the scope or criteria for your restricted profiles are set. You might want to review the configuration to ensure it's targeting the correct OS versions. For more insights on security management tactics and similar administrative concerns, you might also want to check out insights related to Gordon County Charges that highlight various enforcement protocols and system checks.