Mac Patching & Restricting users installing updates from App Store

[sidhu_navdeep]

Greetings to All,

In our environment we are planning to manage Mac patching in a centralized way using NetSUS. In this process of managing patch deployment from a centralized location we want to chalk out a way of restricting end users to install security and OS updates from App store and users should not receive the update notifications to install . Although we don;t want to completely restrict the App Store for end users, so that they can download and install any other application apart from Security and OS updates.

Please guide us by the best possible way to accomplish the above as our patching is going to kick off in next 2 weeks.

Early response will be highly appreciable.

Cheers

[Chris]

If you are pointing your clients to a NetSUS catalogue, the App Store will only show available updates from NetSUS.
As far as i know, it's not possible to restrict the "updates" tab in the App Store and leave the rest open (the other way around is possible though).

[JamesJhoung]

What if you just point your clients to a branch in your SUS that doesn't have any updates enabled, and when it comes time to patch them, point them to a branch that has the updates you would like to deploy?