25 September 2018

Halt MacOS update Mojave

Sometimes, speed isn't of the essence ...

Yes, OSx might be awesome because of the free upgrade to the latest and greatest.  But with any software, there's that might in the sentence. It might go sideways too.  So why don't we put a pin on that little bugger and wait until the more gullible in the world figure out if they just got hosed?




No. that wouldn't happen. Sometimes, but not to your customers.  They just trust you to make sure everything is OK before, well, everything is OK.   So you do our own testing, break your own equipment so our customers don't break theirs.

You're babbling Todd, what does this have to do with Mojave? 

Right. Sorry -

So let's do a quick breakdown of how the install process works ...

1. Here is the link to the macOS Mojave Apple Store webpage. Click on it, and the page will open in your browser. 
2. Click on the View in the Mac App Store button. This will open Mojave in the App Store.
3. Click on the Download button.


mojave app store Apple

4. Once the installation starts, you can let it run unattended, but check in every few minutes to see if a button needs to be click on an option needs to be selected.
5. The Mac will restart to finish the installation. Once it’s done, you can log in and start using your Mac.


Yup, lifted right from www.MacWorld.com. Sorry guys I just need to get to the good part.

Your RMM tool, Kaseya VSA allows you to script anything.  So what's more important then the clever explanation above is the things going on behind the scenes.

Mac won't automatically install an upgrade like Mojave, but it will download the files to make it ready to do so.  So, let's stop that, shall we?

Here's what you need to write (look really closely so you don't misspell anything!) -
Click to expand the procedure editor capture


No you don't have to type it all out, just download the file and import it here -


Then create a View that filters out all your Mac machines and apply it.

This simply looks for, creates, and LOCKS the files necessary to upgrade to the latest release from the Orchard; so now you can make sure  your customers don't run into something before you can run into it first.

This procedure should be accompanied with the appropriate communication to your users.  After all, they won't be able to upgrade after this has been applied.

Then to "undo" this process, you simply change the Shell Command statements to chflags nouchg and the files will be unlocked.

Easier than buying Enterprise level folder moderation software, isn't it?



Thanks to Jeffrey Tigchelaar (The IT Guy (Amsterdam, NL)) for writing the procedure.

1 comment:

  1. Found other resources that may be more appropriate for your situation:
    https://github.com/erikberglund/AppBlocker

    Or:
    https://github.com/google/santa

    ReplyDelete