top of page

Restricting macOS Sequoia

Are you scrambling to restrict macOS Sequoia before users update? Here's a quick guide showing you everything you need to make sure everyone is restricted from the update, regardless of the macOS version they are running, or their architecture type.


Create Restrictions Configuration Profile

Create a Configuration Profile using the Restrictions payload to Defer Updates.


Things to keep in mind:

  • We are deferring all updates, even minor maintenance updates. In older macOS versions this was required to block the major updates as well as the minor updates. However, the trade-off is that users will not be able to install maintenance updates while this is in place. If all your Macs are on Sonoma, this is not necessary.

  • Conflicting Restrictions profiles are an issue. If you already have a Restrictions profile in place, do not deploy a new one, instead edit the existing profile.


Create Software Update policy

Older macOS versions will be able to download the macOS installer and upgrade that way. In order to prevent this you need a Software Update policy in place restricting Install macOS Sequoia.app from running.



Create Smart Group

Create a Smart Group to identify any users that have upgraded to Sequoia. This will use the Operating System Version criteria set to greater than or equal to 15.


Keep in mind:

  • Smart groups are only as accurate as your last Inventory Update, so create a new policy to update everyone's inventory at next check-in (or just flush the logs for your regular Inventory Update policy)


Update Apple Business/School Manager's T&Cs

Apple also updated their T&Cs, so in order for all of your Prestage Enrollments to continue working you will need to accept the new Terms and Conditions.


Prepare for Sequoia

Okay, now you've bought yourself some time! Next step is to make sure your organization is ready for Sequoia, because it's coming whether you like it or not. Take the following steps:


  • Upgrade your test devices to Sequoia to see if anything breaks

  • Ensure all your core software is on the versions that support Sequoia

  • Put together a pilot group of users willing to test out the new macOS version

  • Once you are confident, remove the restriction



Great! You are now prepared for macOS Sequoia. If you'd like to watch a video that goes into more detail on each one of these items, check out https://youtu.be/BPfDKexMsqQ





1,289 views1 comment

1 Σχόλιο


aduran
22 Σεπ

We are still seeing a 1% failure in MDM restrictions and of course the production Mac that upgraded is having serious issues with FileMaker cloud. I wish they never removed the need for admin to upgrade through System Settings. Thanks for this post though.

Μου αρέσει
bottom of page