Blueprints Software Updates Settings deferral

Hi ​@Cephas are your users allowed to install Beta versions. We had one of our users install the Beta of 27 before we put the deferral in place. 

I had two make it through because I missed the deferral setting before they cached the install on the 14th. Apple got this one out fast!

​@Cephas I ran into a similar issue with this. I had my setting for 90 days as well but when I checked on my test device I could still see macOS 27 available in Software Updates. I found there was another setting I had to make under a different component. 

I have “Software Update Settings” component configured as well as “Software Updates”. In the Software Updates component in the blueprint I had the “Enforcement type” set to “Latest OS version”. Once I checked the box “Ignore major versions” under “Enforce the latest OS update within a defined period after release” then I noticed that macOS 27 no longer showed as a download on my test Mac.

Check the box “Ignore major versions” under “Enforce the latest OS update within a defined period after release” that is located in the “Software Updates” component.

Hope this helps!
 

Hi That’s exactly how I already have it configured. I kinda named the Blueprint similarly if you check in the background of my pic

Hi, nope, we are not enrolled in that Beta Program

Everything seemed fine for me from Monday the 14th when I enabled the deferral ( Or perhaps I even enabled it on Sunday already. Can’t remember) but now today (Friday) I check my Jamf Pro dashboard and 2 users upgraded. Yesterday I checked it and it was still just solely me on Golden Gate in the whole Org. I hate to say I’m really annoyed now. Could it be that the Blueprint and it’s configurations never activated yet? When I check deployment status I see there’s 20 devices pending. We have about 190 devices in our org. And, I see there 1 device with an error

You have this checked as well?
 

Have you checked the API for any errors on those? Without the declaration, there could be other behaviors keeping them moving forward. 

Do you have a restricted software in place to block the app installer? 

Thinking of another avenue. Did the user boot from external hard drive and upgrade?

I’m still trying to learn how to check that😭

​@Cephas I ran into a similar issue with this. I had my setting for 90 days as well but when I checked on my test device I could still see macOS 27 available in Software Updates. I found there was another setting I had to make under a different component. 

I have “Software Update Settings” component configured as well as “Software Updates”. In the Software Updates component in the blueprint I had the “Enforcement type” set to “Latest OS version”. Once I checked the box “Ignore major versions” under “Enforce the latest OS update within a defined period after release” then I noticed that macOS 27 no longer showed as a download on my test Mac.

Check the box “Ignore major versions” under “Enforce the latest OS update within a defined period after release” that is located in the “Software Updates” component.

Hope this helps!
 

Hi That’s exactly how I already have it configured. I kinda named the Blueprint similarly if you check in the background of my pic

You have this checked as well?
 

 

Yep
 

Be worth adding a Restricted Software to block the installer.

You reminded me on something -- 🤣

I created a smart group and to notify me if/when someone downloads the Golden Gate installer… I duplicated my old one from last year.

 

Be worth adding a Restricted Software to block the installer.

You reminded me on something -- 🤣

I created a smart group and to notify me if/when someone downloads the Golden Gate installer… I duplicated my old one from last year.

 

 

Ok, I see. Thanks much ​@mvu I’ll do that now😊

Blueprint will take effect from macOS 27, have you placed deferral in configuration profile under restriction payload?

My normal production software update blueprint has a 90-day deferral set for major upgrades. It appears to be working well. On my Mac, macOS 27 was not showing up in Software Update until I moved my Mac to another blueprint setup to allow upgrading. I’m not seeing any unauthorized upgrades. I also have the macOS 27 install app blocked in restricted software. I created the deferral setting in my blueprint about two weeks before the macOS 27 release; I didn’t wait until the release date.

It’s hard to tell for me which one of my three attempts to block are working…

I have the Profile, Restricted, and Blueprint.

No Macs got through, sans the two before I setup the final pieces…

Shame it is so difficult.  I can see blueprints being the way forward, but it’s far from perfect…

Holding strong here as well for macOS and iOS.