Depending on your organization, this may be enough. This does absolutely nothing to prevent someone from doing it anyway, but it asserts authority without removing any privileges. Be sure to specify the penalty for non-compliance. The easiest method for restricting unwanted installations is to disclose your organization’s policy to end users that states “Do not install major macOS upgrades unless authorized by the Information Technology Department”. That usually means taking more than just one step.įollowing are some ideas from less restrictive to more intrusive. What steps can we take to prevent our end users from installing a new major macOS version? Keep in mind, end users can acquire the installer and run the installer in multiple ways. This can result in lengthy support calls when something goes wrong. Not every administrator is ready to support macOS Big Sur, but sometimes our end users get ahead of us and install it themselves. Identifying Macs eligible to erase and install or upgrade.Let’s spend some time discussing how to manage macOS Big Sur installations including: This feature was introduced in Apple’s macOS High Sierra 10.13.4 installer and has evolved with Mojave, Catalina and now Big Sur. Erasing and reinstalling a clean macOS is now a common workflow for reprovisioning Macs for different users, purposes or simply starting over.