macOS Sierra available in App Store

karthikeyan_mac
Contributor III

https://itunes.apple.com/in/app/macos-sierra/id1127487414?mt=12

11 REPLIES 11

mconners
Valued Contributor

Anyone have a clear way to block this? I am experimenting and so far the install starts up and isn't being restricted like El Capitan was.

I am restricting the following process:

Install macOS Sierra.app

Thoughts?

mconners
Valued Contributor

Never mind, this started working with the above restricted process. Just took a bit for the restriction to flow down. Sorry.

elund
New Contributor III

I have a restriction set up the same, but it does not work if I change the name of the installer app itself. It's not catching it by process name. Ideas?

mconners
Valued Contributor

What I found is the JSS hadn't caught up to me. Because I was pushing this along fast, I ended up opening terminal and running the following commands to speed it up.

sudo jamf policy
sudo jamf recon

After this, the restrictions began to work for me. Here is a screen shot of what we have in place.

Mick47a39a6d9dcb4fe8ab9e436c138b4268

elund
New Contributor III

I tried that on two different machines. It still will not catch it if the name of the App is different. The process name in Activity Monitor stays the same like it should - Install macOS Sierra I must need more coffee.

380d5b89d66547ff9f38b20f1a845a1b

mwittenw
New Contributor

I am having the exact same issues. I copied and pasted the installer so no typo errors. I also ran jamf manage and jamf recon and still lets me install.ebc60d99cd8c4eb3953fc089822e992e

mconners
Valued Contributor

Strange. I haven't seen this after running those commands. I ran the sudo jamf policy, recon and manage commands in terminal as well. So far, things are being blocked as expected.

Anyone else have thoughts?

Brad_G
Contributor II

I too didn't get it to work initially. Might have been impatience on my part.

I unchecked the "Restrict exact process name" option and changed it to "Install macOS Sierra" without the .app extension. I figured there shouldn't be anything running with that name anyway.

page_229
New Contributor II

I also was having the same issue. I ended up just using "Install macOS*" and unchecking Restrict exact process name and everything started working. This works fine for me because anything named "Install macOS" should not be running.

daniel_ross
Contributor III

The issue were currently seeing is that the policy works but the user can start interacting with it and thus it can start the update process if they are quick enough clicking wise. Our hope was that it would kill it instantly on the computers and display the message.

joshua
New Contributor

@karthikeyan.mac If you want to block Sierra You can block the process. If you only block the .app you can simply rename the file and still launch it. When you start the install it spawns a process named "osinstallersetupd". Screenshot attached with the configs that I used.

765c629ed5f14e029da730f52c524aa1