<\/p><\/div>
For blocking updates to macOS 13 Ventura, see Create a Mac Policy to Delay or Block Ventura<\/a>.<\/p>\n <\/div><\/div><\/div><\/div>\n\n\n\n
These policies restricts these installers from running. A policy will not prevent the download of the Big Sur or Monterey package. However, when end users attempt to launch the macOS Big Sur installer, it’s terminated. End users don’t receive a block message. To allow end users to upgrade their systems to Big Sur or Monterey, systems must be disassociated from the policy.<\/p>\n\n\n\n
These policies provide a safeguard against any local user upgrading to Big Sur or Monterey until your organization is ready. The policy can prevent most, if not all, of the Big Sur or Monterey upgrades from happening.<\/p>\n\n\n\n
ps -ef|grep ‘com.apple.InstallAssistant.macOSMonterey’<\/code><\/li>\n\n\n\n
If the process to block the Big Sur or Monterey installation is running, the command output will be similar to this Big Sur message:<\/li>\n<\/ol>\n\n\n\n\n$ ps -ef|grep ‘com.apple.InstallAssistant.macOSBigSur’
0 94708 71196 0 11:35AM ?? 0:00.01 log stream –predicate (subsystem matches
“com.apple.launchservices”) && (category matches “cas”) && (processImagePath contains
“InstallAssistant”) && ((eventMessage contains “\\”CFBundleNameLowerCase\\”=\\”install
mac os\\”” ) && ((eventMessage contains
“\\”CFBundleIdentifier\\”=\\”com.apple.InstallAssistant.Seed.”) || (eventMessage contains
“\\”CFBundleIdentifier\\”=\\”com.apple.InstallAssistant.macOSBigSur\\””)))
–style json –level debug<\/p>\n<\/div><\/div>\n\n\n\n
If the process to block the installation is not running, the command output will be similar to this Big Sur message:<\/p>\n\n\n\n
\n501 2216 698 0 8:39 PM ttys000 0:00.00 grep com.apple.InstallAssistant.BigSur;
501 2225 698 0 8:39 PM ttys000 0:00.00 grep com.apple.InstallAssistant.BigSur<\/p>\n<\/div><\/div>\n\n\n\n
You can further verify that the policy is applied by reviewing the jcagent log located here: \/var\/log\/jcagent.log<\/strong>.<\/p>\n\n\n\n
The following items appear in the log if the policy was applied successfully:<\/p>\n\n\n\n
\n[INFO] policies manager received a request to apply block_macos_big_sur_install_darwin
policy
[INFO] policy block_macos_big_sur_install_darwin install succeeded<\/p>\n<\/div><\/div>\n\n\n\n
Considerations<\/strong>:<\/p>\n\n\n\n
\n- Applying the policy installs a monitoring process that checks for the start of the Big Sur or Monterey installation, and if detected, immediately stops it. The policy will not prevent the download of the Big Sur or Monterey package. However, after the download has completed, the installation process receives a kill signal and does not complete.<\/li>\n\n\n\n
- In System Preferences, the existence of the Block Big Sur or Monterey policy will work for local user (unmanaged) profiles.<\/li>\n\n\n\n
- This policy restricts the macOS Big Sur or Monterey installer from running. When end users attempt to launch the installer, it is terminated. End users will not receive a block message; the upgrade will simply fail.<\/li>\n\n\n\n
- This table provides an overview of the policy and the instances in which it will prevent an upgrade:<\/li>\n<\/ul>\n\n\n\n