has anyone been able to configure a restricted process to block the install of an macOS install? I know about the restring the process name by my screenshot that i've attached.
....but an easy way around this is changing the name of the "Install macOS Mojave.app" etc... to something completely random and it will bypass the restriction..
anyone know of a way around this? especially with the upcoming release of Catalina.
Configuration Profiles -> Restrictions Payload -> Functionality tab -> all the way at the bottom, choose Defer updates of, and select Software Updates.
Do that and when a user tries to view macOS updates, they get "Your Mac is running the latest software update allowed by your administrator - (os name and version)"