Skip to main content
Question

Restricting major version upgrades

  • September 27, 2024
  • 4 replies
  • 242 views

Forum|alt.badge.img+1

We're currently working on bringing macOS users that are on version 13 to macOS 14. We want to restrict users from upgrading on their own to macOS 15 until it is fully vetted out. The question here is, if we were to enable this would it also impact our users that are trying to get to version 14 from lower versions?

4 replies

Tangentism
Forum|alt.badge.img+10
  • Honored Contributor
  • September 27, 2024

You can use Graham Pughs 'eraseinstall' script that employs Mist to get a specific macOS version to use to upgrade while having a config profile that blocks updating major and minor updates.

https://github.com/grahampugh/erase-install


junjishimazaki
Forum|alt.badge.img+10
  • New Contributor
  • September 27, 2024

Restricting the upgrade to the latest Mac OS won't prevent the users from upgrading to Sonoma. There are other means to upgrade. How are you going to have the users upgrade?


A_Collins
Forum|alt.badge.img+11
  • Contributor
  • September 30, 2024

The most effective way is to use Apple's "enforcedSoftwareUpdateMajorOSDeferredInstallDelay"

Here is a sample profile 

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>forceDelayedSoftwareUpdates</key> <true/> <key>forceDelayedMajorSoftwareUpdates</key> <true/> <key>enforcedSoftwareUpdateMajorOSDeferredInstallDelay</key> <integer>30</integer> </dict> </plist>

For more info : https://developer.apple.com/documentation/devicemanagement/restrictions 


Forum|alt.badge.img+9
  • Contributor
  • October 5, 2024

The most effective way is to use Apple's "enforcedSoftwareUpdateMajorOSDeferredInstallDelay"

Here is a sample profile 

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>forceDelayedSoftwareUpdates</key> <true/> <key>forceDelayedMajorSoftwareUpdates</key> <true/> <key>enforcedSoftwareUpdateMajorOSDeferredInstallDelay</key> <integer>30</integer> </dict> </plist>

For more info : https://developer.apple.com/documentation/devicemanagement/restrictions 


This is sound advice, but that clock ticks louder and louder every day *sigh*