How to disable macOS Sierra

[jamfmdm]

We want our user not able to upgrade there OS.

What is the correct policy so our user will not able to download or upgrade there OS.

Last time we use this policy but user are able to download the latest Os Seirra..

[kunkelb]

The last one won't work, since Apple doesn't use the Install OS X naming scheme anymore.

The restriction I have set up is this one:

This should kill the process itself, delete the installer, and give the warning. (I don't have SMTP set up so I don't get the email notifications. I should probably do that.) Just be careful if you check off "Restrict exact process name" and then use a wildcard because it'll see the asterisk as an actual part of the process name and NOT a wildcard.

[mgoralski]

I have this rule set up currently to run on All computers. However, there's an exception group (a static group of power users I'm adding to as they ask to upgrade and test for us), but when I add machines to that group, it still won't allow install. Any ideas?

[kunkelb]

After you saved the changes to the scope, did you deploy the policy to newly assigned devices?

[mgoralski]

No, I was unaware of this and do not know how to do it.