Deferring macOS Monterey

New Contributor III

With the ignore flag gone from softwareupdate, how are you all stopping Monterey from being offered in Software Update? For context we're all on Big Sur with a mix of Intel and AS machines. 

We are blocking the installer from running however when we were on Catalina, we put the ignore flag in softwareupdate for Big Sur and ran that daily on everyone's machine. That kept users from getting nagged by the OS to upgrade. 

I was suggested using the defer major config profile, but that only goes for 90 days. I don't think we'll be ready at that point.


Contributor III

Deferring for 90 days via config profile and creating a Restricted Software record seems to be the best option here. I agree that it's not enough for many org's but it's the maximum allowed.