When Mojave was released, we learned that our anti-virus software would prevent a Mojave system from booting, and they weren't going to have a patch released until late October. So, I created a software restriction to block the osinstallersetupd process.
Once the patch was released, I created two smart groups: one for the patched version, one for the unpatched version. I then added the group for the patched version to the exclusion list for the software restriction.
This mostly works well, however I have a handful of people who have the patched version who still get restricted from upgrading. I've checked in Jamf to make sure they are in the correct group, and they are. Sometimes they are able to after a day or so. Some folks can't even after multiple days. For these people, I add their machines individually to the exclusion list, and it seems to work.
Does anyone have any suggestions?
Thanks!