Skip to main content

Standard accounts on macs can install OS updates and app updates with the mac app store without putting admin credentials.

I was wondering what any of you do to prevent users from running app store updates on the mac. I would like to block the OS from updating at all.

Thanks

You could set up a SUS server and point the Macs to it, that way you control the updates.

Could also restrict the App Store under Casper's restriction feature.


@bbeaudre You can execute this command on the client to ignore the El Cap update.

softwareupdate --ignore "OS X El Capitan Update"

I did this until I got my SUS working the way I wanted it.

This way apps can still be updated.