How to add Restricted Software for macOSUpdCombo10.13.4.pkg

Bernard_Huang
Contributor III

Hi all,

Due to DisplayLink not being compatible with latest macOS High Sierra 10.13.4, we want to stop people from download and installing the updater itself from App Store.

Does anyone know how to set up such thing in Restricted Software? We've had success with blocking people from upgrading from Sierra to High Sierra (Users have to upgrade from Self Service, cannot be done via App Store). But for this updater, the process is "Installer", and we don't want to block that, it will block everything from installing.
83430619bfb9426c940381cc5c3588ea

So far I have set up the attached screenshot, but hasn't worked yet.

3 REPLIES 3

Bernard_Huang
Contributor III

Forgot to mention, we're using Casper JSS 9.101.

mm2270
Legendary Contributor III

You can't use Restricted Software to stop individual pkg installers, because, as you already mentioned, the app that runs those is "Installer.app" That's the only process Jamf Pro would see in relation to that pkg being installed by a user.

Do you have your clients pointed to any internal SUS, like an Apple one, or Resposado, NetSUS, etc? If so, you could disable that update from being published, and for good measure you could add it to the --ignore updates list for the softwareupdate utility. In fact, you could take the latter approach if you don't have them directed to a managed SUS.
That wouldn't stop anyone from downloading the 10.13.4 update from Apple's site directly though.

Bernard_Huang
Contributor III

Thanks. App Store auto update are already disabled on all our Macbooks.

So can't stop pkgs. ok :)