block macOS upgrade

[raphhyyy]

has anyone been able to configure a restricted process to block the install of an macOS install? I know about the restring the process name by my screenshot that i've attached.

....but an easy way around this is changing the name of the "Install macOS Mojave.app" etc... to something completely random and it will bypass the restriction..

anyone know of a way around this? especially with the upcoming release of Catalina.

[landon_Starr]

You can create a config profile to restrict beta installs. It can be found under the Software Update payload.

[gskibum]

This is what mine look like.

[Darb]

Configuration Profiles -> Restrictions Payload -> Functionality tab -> all the way at the bottom, choose Defer updates of, and select Software Updates.

Do that and when a user tries to view macOS updates, they get "Your Mac is running the latest software update allowed by your administrator - (os name and version)"