Posted on 10-21-2015 10:55 AM
Will an existing restricted policy which is blocking El Capitan block this?
If not, can it be restricted?(without a corporate update server)
Thanks all in advance !!
Solved! Go to Solution.
Posted on 10-21-2015 11:04 AM
No, an existing Restricted Software item to block 10.11 won't help here, other than to say that if your clients can't upgrade to 10.11 in the first place, then why worry about 10.11.1?
Posted on 10-21-2015 11:10 AM
Is it a sequential update? do you have to be on 10.11 before upgrading to 10.11.1 ? or can someone on 10.10.5 move directly to 10.11.1 ?
Yes to both. But how they each get installed is different. Updating from 10.x.x to 10.11.1 would still require downloading the full OS X Installer "app", which, if you have a successfully working Restricted Software block, will still get blocked, as @dgreening mentioned.
If a Mac is already on 10.11, then 10.11.1 will likely show up as a regular Software update "update", meaning its not a full blown OS upgrade, just an incremental update. Those are harder to block unless you point all your Macs to a SUS or similar control system.
Posted on 10-21-2015 11:11 AM
You must be on the major OS version (such as 10.11.x ) in order to get the minor OS updates (such as 10.11.1). These updates are available via Software Update. In order to go from an older OS such as 10.10.X to a minor OS version of a newer OS you need to go through the App Store (not Software Update which is just regulated to a tab within the App Store) and install the OS that way. So yes, someone could theoretically upgrade to 10.11.1 from 10.10.5 but they wouldn't be doing it through Software Update but rather through the App Store. If you have the 10.11 installer blocked via Casper you should be ok.
Posted on 10-21-2015 11:11 AM
@AlistairCarr Yes, but to do that they have to install El Capitan from the Mac App Store. If you have a Restricted Software in place to block El Capitan, then your 10.10.x users will not be able to upgrade to it.
Posted on 10-21-2015 10:56 AM
The El Cap full install will still be called the same thing, so you will be good there. If they are already on El Cap... well... not sure there is an easy way to block it without running your own SUS server, and even there, they could run the Combo which uses Installer (which you cant really block).
Posted on 10-21-2015 11:04 AM
Thankfully thanks to the great help from the people on here (such as yourself) i managed to get the restriction policy in with only a handful of macs 11 out of 400 or so updating to El Cap
So long as the current restriction policy will block it it's all good !!
Thanks for the speedy response :)
Posted on 10-21-2015 11:04 AM
No, an existing Restricted Software item to block 10.11 won't help here, other than to say that if your clients can't upgrade to 10.11 in the first place, then why worry about 10.11.1?
Posted on 10-21-2015 11:06 AM
Im slightly confused then.....
Is it a sequential update? do you have to be on 10.11 before upgrading to 10.11.1 ? or can someone on 10.10.5 move directly to 10.11.1 ?
Posted on 10-21-2015 11:09 AM
On a related note: Does OS X 10.11.1 unify across all current Apple Mac hardware (new 4K iMacs, etc)?
Posted on 10-21-2015 11:10 AM
Is it a sequential update? do you have to be on 10.11 before upgrading to 10.11.1 ? or can someone on 10.10.5 move directly to 10.11.1 ?
Yes to both. But how they each get installed is different. Updating from 10.x.x to 10.11.1 would still require downloading the full OS X Installer "app", which, if you have a successfully working Restricted Software block, will still get blocked, as @dgreening mentioned.
If a Mac is already on 10.11, then 10.11.1 will likely show up as a regular Software update "update", meaning its not a full blown OS upgrade, just an incremental update. Those are harder to block unless you point all your Macs to a SUS or similar control system.
Posted on 10-21-2015 11:11 AM
You must be on the major OS version (such as 10.11.x ) in order to get the minor OS updates (such as 10.11.1). These updates are available via Software Update. In order to go from an older OS such as 10.10.X to a minor OS version of a newer OS you need to go through the App Store (not Software Update which is just regulated to a tab within the App Store) and install the OS that way. So yes, someone could theoretically upgrade to 10.11.1 from 10.10.5 but they wouldn't be doing it through Software Update but rather through the App Store. If you have the 10.11 installer blocked via Casper you should be ok.
Posted on 10-21-2015 11:11 AM
The App Store is serving out the 10.11.1 full install of El Cap, so if someone downloaded it today and ran it they would go direct to 10.11.1.
Posted on 10-21-2015 11:11 AM
@AlistairCarr Yes, but to do that they have to install El Capitan from the Mac App Store. If you have a Restricted Software in place to block El Capitan, then your 10.10.x users will not be able to upgrade to it.
Posted on 10-21-2015 11:14 AM
Thank you all very much for your inputs !
Posted on 10-21-2015 02:35 PM
Download 10.11.1 Update from here:
https://support.apple.com/kb/DL1845?viewlocale=en_US&locale=en_US
Posted on 10-21-2015 08:09 PM
@dstranathan Yes, 10.11.1 re-unifies the OS from the iMac 5K forked versions of 10.11.0.