block macOS upgrade

raphhyyy
New Contributor III

has anyone been able to configure a restricted process to block the install of an macOS install? I know about the restring the process name by my screenshot that i've attached.427b88997f084c799e8ad6454143a9b4

....but an easy way around this is changing the name of the "Install macOS Mojave.app" etc... to something completely random and it will bypass the restriction..

anyone know of a way around this? especially with the upcoming release of Catalina.

3 REPLIES 3

landon_Starr
Contributor

You can create a config profile to restrict beta installs. It can be found under the Software Update payload.

gskibum
Contributor III

This is what mine look like.

98721dd9b5524655afdf240339767744

Darb
New Contributor II

Configuration Profiles -> Restrictions Payload -> Functionality tab -> all the way at the bottom, choose Defer updates of, and select Software Updates.

Do that and when a user tries to view macOS updates, they get "Your Mac is running the latest software update allowed by your administrator - (os name and version)"