Skip to main content
Solved

Methods to Stop MacOS Updates

  • July 11, 2022
  • 3 replies
  • 57 views

Forum|alt.badge.img+5

Hello,

I'm looking for suggestions on stopping Mac OS  software updates?  We try to maintain control of what updates go out when because of our classes and such, and was looking for thoughts on ways to achieve this.  It drives me crazy when an issue comes up and I look at a lab and there are 2 or 3 different OS versions on different computers.

Thanks for your suggestions!

Best answer by pete_c

Use the 'deferral' payload (Computers > Configuration Profiles > Restrictions > Functionality).  Limit admin users and make sure you have a regular, solid policy to rotate any local admin account passwords (incrementing 22 to 23 does not count).  Define and publish standards for organizationally owned or managed equipment in terms of supported OS and app versions.

3 replies

Forum|alt.badge.img+7
  • Contributor
  • 17 replies
  • July 11, 2022

Hello,

 

We are deploying a .plist config profile to hide software updates pane in system preferences. And we restrict the pane via the restrictions configuration profile. We make sure our OS keeps getting the minor update via a re-occurring policy which executes "SoftwareUpdate -iaR".


pete_c
Forum|alt.badge.img+16
  • Honored Contributor
  • 258 replies
  • Answer
  • July 11, 2022

Use the 'deferral' payload (Computers > Configuration Profiles > Restrictions > Functionality).  Limit admin users and make sure you have a regular, solid policy to rotate any local admin account passwords (incrementing 22 to 23 does not count).  Define and publish standards for organizationally owned or managed equipment in terms of supported OS and app versions.


Forum|alt.badge.img+5
  • Author
  • Contributor
  • 47 replies
  • July 14, 2022

Thank you for the feedback.  Are you disabling the keep my Mac up to date using a config profile - Software Update area?  If so, are you removing the checkmark in all of the items?  Also, do you know if the deferral payload needs configured along with the software update ones for any reason?