Are you scrambling to restrict macOS Sequoia before users update? Here's a quick guide showing you everything you need to make sure everyone is restricted from the update, regardless of the macOS version they are running, or their architecture type.
Create Restrictions Configuration Profile
Create a Configuration Profile using the Restrictions payload to Defer Updates.
Things to keep in mind:
We are deferring all updates, even minor maintenance updates. In older macOS versions this was required to block the major updates as well as the minor updates. However, the trade-off is that users will not be able to install maintenance updates while this is in place. If all your Macs are on Sonoma, this is not necessary.
Conflicting Restrictions profiles are an issue. If you already have a Restrictions profile in place, do not deploy a new one, instead edit the existing profile.
Create Software Update policy
Older macOS versions will be able to download the macOS installer and upgrade that way. In order to prevent this you need a Software Update policy in place restricting Install macOS Sequoia.app from running.
Create Smart Group
Create a Smart Group to identify any users that have upgraded to Sequoia. This will use the Operating System Version criteria set to greater than or equal to 15.
Keep in mind:
Smart groups are only as accurate as your last Inventory Update, so create a new policy to update everyone's inventory at next check-in (or just flush the logs for your regular Inventory Update policy)
Update Apple Business/School Manager's T&Cs
Apple also updated their T&Cs, so in order for all of your Prestage Enrollments to continue working you will need to accept the new Terms and Conditions.
Login to Apple Business/School Manager
Apple Business Manager: https://business.apple.com
Apple School Manager: https://school.apple.com
Note: You will need to be an Administrator in order to accept the T&Cs
Prepare for Sequoia
Okay, now you've bought yourself some time! Next step is to make sure your organization is ready for Sequoia, because it's coming whether you like it or not. Take the following steps:
Upgrade your test devices to Sequoia to see if anything breaks
Ensure all your core software is on the versions that support Sequoia
Put together a pilot group of users willing to test out the new macOS version
Once you are confident, remove the restriction
Great! You are now prepared for macOS Sequoia. If you'd like to watch a video that goes into more detail on each one of these items, check out https://youtu.be/BPfDKexMsqQ