- Go to the Restricted Software section and click New.
- In the "Process Name" field, enter "Install macOS High Sierra*"
- Uncheck the "Restrict exact process name" box.
- Check the "kill process" box.
- Add a message to display to the end user if they try to launch the High Sierra installer.
- Click on the Scope tabs, and select the computers, groups, or users you want this restriction to apply to.
Software restrictions should take effect after on computers after their next checkin, which normally happens about once every half hour.
If you need assistance creating restrictions or have any questions, please contact the Endpoint Management team at firstname.lastname@example.org.