Tag: mojave

  • TCC in Mojave doesn’t prevent deleting local folders for AD-bound Macs

    Note: We’re currently using a setup of Force local home directory on startup disk for AD-bound Macs instead of Create mobile account at login or Use UNC path from Active Directory to derive network home location—so if you’re using either of those other options, your mileage may vary—definitely do some testing! This is also as…

  • Using Santa to block macOS upgrades

    In the past, I’d used the fake installer approach to stop users from upgrading to the newest macOS version. But with macOS 10.14 (Mojave), I started blocking using Santa (see Using Santa to block an .app for more details on general Santa use). It’s likely this Santa-blocking approach also works for High Sierra and Sierra…