Got a question around Restricted Software and false positives. So long story short I am restricting the ‘Install macOS Catalina’ and ‘osinstallersetupd’ but only to a smart group that does not have a specific version of our AV client installed. We kill the process and display a message to users saying their is a compatibility issue.
My test client is DEP enrolled, does not have the version of the AV that would drop it into the smart group (i.e. it is a version that is fine for Catalina), does not show those items as restricted (see screenshot below) but the Catalina installer is still getting blocked and popping up our message!
It is driving me mad – any ideas?
