Skip to main content
Question

macOS Sierra Restricted Software record does not block OS upgrades

  • September 26, 2016
  • 7 replies
  • 17 views
C
Forum|alt.badge.img+3

Hi all,

We're running Casper 9.91 and I configured a Restricted Software record to block macOS upgrades until we're ready for primetime. I blocked the macOS Install.app process rather than blocking InstallAssistant or osinstallersetupd because we're also in the process of getting some stragglers onto El Cap so our fleet can stay consistent until we're ready to roll out Sierra company-wide. The RS record was working normally but now it no longer suppresses the upgrade. I've tried tweaking the record multiple times, and ensured the framework is current using "sudo jamf manage".

Any thoughts on how to proceed without blocking InstallAssistant or osinstallersetupd? Could this also be related to Casper 9.91?

7 replies

M
Forum|alt.badge.img+12
  • May
  • Valued Contributor
  • 190 replies
  • September 26, 2016

Hi @cghigliotty

These settings are working for us

another discussion over here

B
Forum|alt.badge.img+3
  • bret_bender
  • Employee
  • 1 reply
  • September 27, 2016

For those who still run into issues with the "sierra" option, try "macOS Sierra.app" this should block the install with no issue

jconte
Forum|alt.badge.img+12
  • jconte
  • Valued Contributor
  • 131 replies
  • September 27, 2016

I block this as well.

Haven't had any issues, been using since Yosemite.

J
Forum|alt.badge.img+2
  • joshua11
  • New Contributor
  • 13 replies
  • September 27, 2016

If you want to block Sierra You can block the process. If you only block the .app you can simply rename the file and still launch it. When you start the install it spawns a process named "osinstallersetupd". Screenshot attached with the configs that I used.

D
Forum|alt.badge.img+7
  • ds_support
  • Contributor
  • 25 replies
  • October 19, 2016

@joshua Many Thanks for this great idea! Works perfectly!

daniel_ross
Forum|alt.badge.img+18
  • daniel_ross
  • Jamf Heroes
  • 204 replies
  • November 11, 2016

@joshua did it block it right away or did it take time to push out?

Running into issues getting your method to work as it seems to be the one size fits all solution for OS upgrade blocking for Sierra.

EDIT: We got this working finally. Not sure why but it took several hours for the .app for Sierra only to be blocked.

K
Forum|alt.badge.img+6
  • KSchroeder
  • Contributor
  • 103 replies
  • December 7, 2016

Will using the "osinstallersetupd" block still allow point releases from older versions to install (i.e. if someone is still on 10.11.2, can they update to 10.11.6)?


Terms & ConditionsCookie settingsAccessibility statement