10.11.1 update

AlistairCarr
New Contributor II

Will an existing restricted policy which is blocking El Capitan block this?

If not, can it be restricted?(without a corporate update server)

Thanks all in advance !!

4 ACCEPTED SOLUTIONS

mm2270
Legendary Contributor III

No, an existing Restricted Software item to block 10.11 won't help here, other than to say that if your clients can't upgrade to 10.11 in the first place, then why worry about 10.11.1?

View solution in original post

mm2270
Legendary Contributor III
Is it a sequential update? do you have to be on 10.11 before upgrading to 10.11.1 ? or can someone on 10.10.5 move directly to 10.11.1 ?

Yes to both. But how they each get installed is different. Updating from 10.x.x to 10.11.1 would still require downloading the full OS X Installer "app", which, if you have a successfully working Restricted Software block, will still get blocked, as @dgreening mentioned.
If a Mac is already on 10.11, then 10.11.1 will likely show up as a regular Software update "update", meaning its not a full blown OS upgrade, just an incremental update. Those are harder to block unless you point all your Macs to a SUS or similar control system.

View solution in original post

bpavlov
Honored Contributor

You must be on the major OS version (such as 10.11.x ) in order to get the minor OS updates (such as 10.11.1). These updates are available via Software Update. In order to go from an older OS such as 10.10.X to a minor OS version of a newer OS you need to go through the App Store (not Software Update which is just regulated to a tab within the App Store) and install the OS that way. So yes, someone could theoretically upgrade to 10.11.1 from 10.10.5 but they wouldn't be doing it through Software Update but rather through the App Store. If you have the 10.11 installer blocked via Casper you should be ok.

View solution in original post

stevewood
Honored Contributor II
Honored Contributor II

@AlistairCarr Yes, but to do that they have to install El Capitan from the Mac App Store. If you have a Restricted Software in place to block El Capitan, then your 10.10.x users will not be able to upgrade to it.

View solution in original post

12 REPLIES 12

dgreening
Valued Contributor II

The El Cap full install will still be called the same thing, so you will be good there. If they are already on El Cap... well... not sure there is an easy way to block it without running your own SUS server, and even there, they could run the Combo which uses Installer (which you cant really block).

AlistairCarr
New Contributor II

Thankfully thanks to the great help from the people on here (such as yourself) i managed to get the restriction policy in with only a handful of macs 11 out of 400 or so updating to El Cap

So long as the current restriction policy will block it it's all good !!

Thanks for the speedy response :)

mm2270
Legendary Contributor III

No, an existing Restricted Software item to block 10.11 won't help here, other than to say that if your clients can't upgrade to 10.11 in the first place, then why worry about 10.11.1?

AlistairCarr
New Contributor II

Im slightly confused then.....

Is it a sequential update? do you have to be on 10.11 before upgrading to 10.11.1 ? or can someone on 10.10.5 move directly to 10.11.1 ?

dstranathan
Valued Contributor II

On a related note: Does OS X 10.11.1 unify across all current Apple Mac hardware (new 4K iMacs, etc)?

mm2270
Legendary Contributor III
Is it a sequential update? do you have to be on 10.11 before upgrading to 10.11.1 ? or can someone on 10.10.5 move directly to 10.11.1 ?

Yes to both. But how they each get installed is different. Updating from 10.x.x to 10.11.1 would still require downloading the full OS X Installer "app", which, if you have a successfully working Restricted Software block, will still get blocked, as @dgreening mentioned.
If a Mac is already on 10.11, then 10.11.1 will likely show up as a regular Software update "update", meaning its not a full blown OS upgrade, just an incremental update. Those are harder to block unless you point all your Macs to a SUS or similar control system.

bpavlov
Honored Contributor

You must be on the major OS version (such as 10.11.x ) in order to get the minor OS updates (such as 10.11.1). These updates are available via Software Update. In order to go from an older OS such as 10.10.X to a minor OS version of a newer OS you need to go through the App Store (not Software Update which is just regulated to a tab within the App Store) and install the OS that way. So yes, someone could theoretically upgrade to 10.11.1 from 10.10.5 but they wouldn't be doing it through Software Update but rather through the App Store. If you have the 10.11 installer blocked via Casper you should be ok.

dgreening
Valued Contributor II

The App Store is serving out the 10.11.1 full install of El Cap, so if someone downloaded it today and ran it they would go direct to 10.11.1.

stevewood
Honored Contributor II
Honored Contributor II

@AlistairCarr Yes, but to do that they have to install El Capitan from the Mac App Store. If you have a Restricted Software in place to block El Capitan, then your 10.10.x users will not be able to upgrade to it.

AlistairCarr
New Contributor II

Thank you all very much for your inputs !

mhasman
Valued Contributor

RobertHammen
Valued Contributor II

@dstranathan Yes, 10.11.1 re-unifies the OS from the iMac 5K forked versions of 10.11.0.