Software restriction does not work - help - Mojave

oddity-mdm
New Contributor III

Hello,

we want to block the MacOS Mojave update. I scope to all devices and set the Software restrictions as following:

6d834fbf2aa34c96b327b65d95bccc80

I made 3 additional restrictions which block:

Mojave
installAssistent
osinstallersetupd (process found in activity monitor)

I can still load it from the AppStore and install if after it. What am I doing wrong?

Best regards
Maurice Fiedler

3 ACCEPTED SOLUTIONS

nateburt
New Contributor III

"macOS Mojave.app" is the name of the download I just got from the App Store

Correction: it downloaded without "Install", but is now named "Install macOS Mojave.app" - which follows their conventional naming.

View solution in original post

Hugonaut
Valued Contributor II

I always approach with both the Process name & application.

'Restrict Exact Process Name' & restrict the process 'Install macOS Mojave' - should do the trick

f928ab0dadf24f8bac85200f54849931

________________
Looking for a Jamf Managed Service Provider? Look no further than Rocketman
________________


Virtual MacAdmins Monthly Meetup - First Friday, Every Month

View solution in original post

jhalvorson
Valued Contributor

My restricted software is preventing Mojave updates.

The Process Name is set to:

Install macOS Mojave.app

I have set "Restrict exact process name" enabled.

I have not tested if the results are the same if you do not include the file extension ".app".

View solution in original post

7 REPLIES 7

nateburt
New Contributor III

"macOS Mojave.app" is the name of the download I just got from the App Store

Correction: it downloaded without "Install", but is now named "Install macOS Mojave.app" - which follows their conventional naming.

Hugonaut
Valued Contributor II

I always approach with both the Process name & application.

'Restrict Exact Process Name' & restrict the process 'Install macOS Mojave' - should do the trick

f928ab0dadf24f8bac85200f54849931

________________
Looking for a Jamf Managed Service Provider? Look no further than Rocketman
________________


Virtual MacAdmins Monthly Meetup - First Friday, Every Month

jhalvorson
Valued Contributor

My restricted software is preventing Mojave updates.

The Process Name is set to:

Install macOS Mojave.app

I have set "Restrict exact process name" enabled.

I have not tested if the results are the same if you do not include the file extension ".app".

oddity-mdm
New Contributor III

Thank you guys it finally worked. We added all your suggestions. As @Hugonaut said it is probably the best to add as much as possible :)

Hugonaut
Valued Contributor II

Glad to help!

________________
Looking for a Jamf Managed Service Provider? Look no further than Rocketman
________________


Virtual MacAdmins Monthly Meetup - First Friday, Every Month

rstasel
Valued Contributor

Anyone finding this not working recently? I've got Jamf Pro 10.8, and it just DOESN'T work. Created 4 different restrictions based on InstallAssistant, osinstallersetupd, "Install macOS Mojave" and "Install macOS Mojave.app". I can still launch the installer on machines. =-/

rstasel
Valued Contributor

Oh, no, it works (sorta). Clearly jamf is just looking at running processes every 30 seconds or so and killing any disallowed ones it finds. =/