Allow or Block the latest Mac OS
This set of agent procedure will allow you to block the Mac Os Catalina upgrade to prevent the end users from being able to upgrade.
It leverages the "softwareupdate" command to set the patch to be ignored. There is also another procedure to reset all ignored patches or reset the Mac Catalina only.
This needs to be done prior to the upgrade as it cannot perform a downgrade from an updated endpoint.
Procedure set imports and works great! Thank you contributors!
@Timothy, as part of the procedures, there is one to reset the list of patches to ignore including Catalina.
The procedure is missing. It only creates a folder.
It appears I must give myself permissions to the new folder. I am now able to view the procedures.
Having already created a similar procedure, I also advise adding
softwareupdate --ignore 'macOS Catalina Beta'
as this will hide the Catalina BETA in case users have signed up for public beta programs.
@Mykel, Thanks for the suggestion, I edited the XML and procedure to block the Beta as well.
Procedure set imports and works great! Thank you contributors!
-Brent
You will likely also want to block the update notification utility that Apple uses to notify users of Catalina:
sudo softwareupdate --ignore "macOSInstallerNotification_GM"
Would that command have the potential to block future OS update notifications ( for 10.16, 10.17, etc)?
@Josh Youngberg - yes, it would. In order to resume update notifications, you would have to run the following command:
sudo softwareupdate --reset-ignored "macOSInstallerNotification_GM"
How do we allow it back again once we are ready?