Block macOS beta updates and defer major macOS upgrades in HexnodeSolved

Participant
Discussion
2 weeks ago Jun 30, 2026

I manage a group of Macs with Hexnode and want to stop users from installing upcoming macOS beta versions. I also want to delay the next major macOS release so it does not appear immediately on managed devices.

Is there a way to block a specific macOS version by name, or should this be handled through the software update settings?

Replies (3)

Marked SolutionPending Review
Hexnode Expert
2 weeks ago Jun 30, 2026
Marked SolutionPending Review

Hi @gnishilda,

You can control this using the macOS Software Update Preferences policy in Hexnode.

To block macOS beta releases:

  1. Go to Policies > New Policy, or edit an existing policy.
  2. Navigate to macOS > Patches & Updates > Software Update Preferences.
  3. Click Configure.
  4. Set Install pre-release software to Deny.
  5. Associate the policy with the required Macs.

This prevents users from seeing, downloading, or enrolling the Mac into Apple pre-release software updates through managed update settings.

To delay a major public macOS release:

  1. In the same Software Update Preferences configuration, enable Defer major upgrades.
  2. Set the deferral period to 90 days, which is the maximum duration allowed by Apple.
  3. Optionally, enable Defer minor upgrades if you also want to delay smaller point updates.

Apple does not allow MDMs to permanently blocklist a specific future macOS version. The supported approach is to defer major upgrades for up to 90 days from the official release date.

Regards,
Sienna Carter
Hexnode UEM

Marked SolutionPending Review
Participant
2 weeks ago Jul 01, 2026
Marked SolutionPending Review

Can this be blocked by OS version name instead? For example, if I only want to block one specific macOS release and not all future upgrades.

Marked SolutionPending Review
Hexnode Expert
2 weeks ago Jul 01, 2026
Marked SolutionPending Review

Hi @gnishilda,

Blocking a macOS update by version name is not supported through Hexnode. The available controls are policy-based deferrals and restrictions. For beta versions, use Install pre-release software > Deny. For public major releases, use Defer major upgrades. Beta updates may also not appear as separate listed updates in the patches view, so they are best handled using the pre-release software restriction rather than trying to target them individually.

Regards,
Sienna Carter
Hexnode UEM

Save