Skip to main content
Question

Restricting major version upgrades

  • Sep 27, 2024 1:17 PM UTC
  • 4 replies
  • 598 views

Forum|alt.badge.img+1

We're currently working on bringing macOS users that are on version 13 to macOS 14. We want to restrict users from upgrading on their own to macOS 15 until it is fully vetted out. The question here is, if we were to enable this would it also impact our users that are trying to get to version 14 from lower versions?

4 replies

Tangentism
Forum|alt.badge.img+10
  • Honored Contributor
  • Sep 27, 2024 1:48 PM UTC

You can use Graham Pughs 'eraseinstall' script that employs Mist to get a specific macOS version to use to upgrade while having a config profile that blocks updating major and minor updates.

https://github.com/grahampugh/erase-install


junjishimazaki
Forum|alt.badge.img+10

Restricting the upgrade to the latest Mac OS won't prevent the users from upgrading to Sonoma. There are other means to upgrade. How are you going to have the users upgrade?


A_Collins
Forum|alt.badge.img+11
  • Contributor
  • Sep 30, 2024 3:51 AM UTC

The most effective way is to use Apple's "enforcedSoftwareUpdateMajorOSDeferredInstallDelay"

Here is a sample profile 

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>forceDelayedSoftwareUpdates</key> <true/> <key>forceDelayedMajorSoftwareUpdates</key> <true/> <key>enforcedSoftwareUpdateMajorOSDeferredInstallDelay</key> <integer>30</integer> </dict> </plist>

For more info : https://developer.apple.com/documentation/devicemanagement/restrictions 


Forum|alt.badge.img+10
  • Contributor
  • Oct 5, 2024 12:02 AM UTC

The most effective way is to use Apple's "enforcedSoftwareUpdateMajorOSDeferredInstallDelay"

Here is a sample profile 

<?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd"> <plist version="1.0"> <dict> <key>forceDelayedSoftwareUpdates</key> <true/> <key>forceDelayedMajorSoftwareUpdates</key> <true/> <key>enforcedSoftwareUpdateMajorOSDeferredInstallDelay</key> <integer>30</integer> </dict> </plist>

For more info : https://developer.apple.com/documentation/devicemanagement/restrictions 


This is sound advice, but that clock ticks louder and louder every day *sigh*