Blocking Minor macOS update?

[Javy]

Does anyone know a way to block a minor OS update? We're having issues with a required app causing kernel panics on the latest High Sierra. We have quite a few machines on 10.13.1, and need to prevent them from updating to 10.13.2

[Nix4Life]

look here

[athomson]

This is what I am using.

/usr/sbin/softwareupdate --ignore "macOS 10.13.2 Update"

[Jesus_Alvarez]

I know this is an old post, but can this be used with a wild card so that nothing over 10.13.1 can be installed?

/usr/sbin/softwareupdate --ignore "macOS 10.13.% Update"

We use Displaylink docks and nothing over 10.13.3 works correctly and we keep having people upgrade above 10.13.3.

Thanks,

Jesus

[bmarks]

You can achieve similar results using a config profile now. A recent JSS update now allows you to defer the visibility of system updates between 7 and 90 days. This requires 10.13.4 however.

[Jesus_Alvarez]

Thanks for the response Benjamin. We are trying to prevent people from going to 10.13.4 so we wouldn't be able to take advantage of that just yet. I ended up using the previous suggestion of creating a policy and running this:

softwareupdate --ignore "macOS 10.13.4 Update"

I then cloned it and made one for 10.13.5 and 10.13.6 just to be safe. Tested it and it is working as it should.

Jesus