Restrict Ventura

rtymch_-_softse
New Contributor

Is there a way to restrict a major software update other than the 90 day deferred update in the configuration profile?

And what about a solution to restrict installing a beta version as system updates?

2 REPLIES 2

Hugonaut
Valued Contributor II

@rtymch_-_softse  You'll want to utilize the Restricted Software feature as depicted below

(Jamf Dashboard -> Computers Tab -> Restricted Software -> +New)

 

Screen Shot 2022-08-04 at 10.05.04 AM.png

 

Screen Shot 2022-08-04 at 10.11.46 AM.png

________________
Looking for a Jamf Managed Service Provider? Look no further than Rocketman
________________


Virtual MacAdmins Monthly Meetup - First Friday, Every Month

sdagley
Honored Contributor III

@rtymch_-_softse You can block betas by using an Application & Custom Settings payload in a Configuration Profile to deploy the following .plist to the com.apple.SoftwareUpdate domain:

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
  <dict>
    <key>AllowPreReleaseInstallation</key>
    <false/>
  </dict>
</plist>

As for blocking the macOS Ventura installer there is a problem with the Restricted Software method @Hugonaut presents in that for users on macOS Monterey 12.3 or higher the macOS Ventura update will apparently be done as a delta update via the Software Update process instead of requiring the full app installer to run so you need the update deferral Configuration Profile to block that plus the Restricted Software configurations to block users who try downloading the full installer.