Restricting major version upgrades

[salvatore369f]

We're currently working on bringing macOS users that are on version 13 to macOS 14. We want to restrict users from upgrading on their own to macOS 15 until it is fully vetted out. The question here is, if we were to enable this would it also impact our users that are trying to get to version 14 from lower versions?

[Tangentism]

You can use Graham Pughs 'eraseinstall' script that employs Mist to get a specific macOS version to use to upgrade while having a config profile that blocks updating major and minor updates.

https://github.com/grahampugh/erase-install

[junjishimazaki]

Restricting the upgrade to the latest Mac OS won't prevent the users from upgrading to Sonoma. There are other means to upgrade. How are you going to have the users upgrade?

[A_Collins]

The most effective way is to use Apple's "enforcedSoftwareUpdateMajorOSDeferredInstallDelay"

Here is a sample profile 

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
  <dict>
    <key>forceDelayedSoftwareUpdates</key>
    <true/>
    <key>forceDelayedMajorSoftwareUpdates</key>
    <true/>
    <key>enforcedSoftwareUpdateMajorOSDeferredInstallDelay</key>
    <integer>30</integer>
  </dict>
</plist>

For more info : https://developer.apple.com/documentation/devicemanagement/restrictions 

[byrnese]

This is sound advice, but that clock ticks louder and louder every day *sigh*