Blocking ios updates

[RLR]

This has been brought up several times in the past but never a solution except at a firewall level which means our users will be able to download the updates from another network. IOS 10 just around the corner we're wanting to block it until we're happy there's no major issues.

I guess this functionality is still not available in MDMs yet?

[adamcodega]

There isn't a way to restrict updates, there is a way to push an OS update to a supervised and DEP enrolled iPad, I'm not sure if that device will still notify the user an update is available.

The only thing I'd be concerned with in terms of OS updates is your org's Wi-Fi, so get on the developer or at the very least the public beta now. Why wait when it's already available?

As for apps, a developer who's app stops working on a newer version of iOS should be laughed out of the room.

[ImAMacGuy]

i believe we blocked it at the firewall level.

[HCSTech]

Another pseudo option is turning off Notifications for Settings.
Some people update simply because they see the red notification.
Not a real solution but you would be surprised the percentage that this will stop some people from updating.

[cbrewer]

Blocking mesu.apple.com is still the best way to accomplish this. This doesn't block the downloading of iOS 10, but instead restricts the ability of an iOS device to see that any iOS updates are available.

http://www.enterpriseios.com/story/2013/09/17/How_to_use_DNS_to_block_iOS_7_and_other_updates_too

[steelopus]

FYI, we are using a full DNS redirect to self-hosted XMLs.

Here is my discussion on our current procedure:
https://jamfnation.jamfsoftware.com/discussion.html?id=21192