5 ms·

Isn’t security the biggest reason for most? Also I work for a medium sized company and at least on a windows domain with GPO, they can lock down which windows

Isn’t security the biggest reason for most? Also I work for a medium sized company and at least on a windows domain with GPO, they can lock down which windows updates are applied. Does anything like that exist for MacOS shops? Can IT control what is allowed to be applied and what is not?

throwaway201103 6y ago
Typically they will use Caspar, now called Jamf Pro. https://www.jamf.com/products/jamf-pro/ https://www.jamf.com/products/jamf-pro/
jlgaddis 6y ago
> Isn’t security the biggest reason for most? I don't think that's the biggest reason to upgrade to a new major (or even minor) version, especially when the previous release(s) are still supported for quite some time. Catalina, macOS 10.15, for example, didn't stop being supported when Bug Sur, 11.0, was released. In fact, it will still be supported for quite some time. Mojave, 10.14, is supported until late next year and, High Sierra, 10.13, is still supported even today! Unless there's some new feature that you absolutely just must have, there just really isn't any compelling enough reason for most folks to immediately upgrade to a new .0 release. In the Windows world, the conventional wisdom -- for probably a decade and a half! -- has been to wait until after SP1 to move to a new major version. Maybe the younger generation just hasn't been burned (bad) enough (yet) for them to learn not to touch the stove?
- happymellon 6y ago
  But in every other world you can always boot from a recovery USB and fix it, nothing is usually "bricked". Not so with newer Mac's so the risk has intensified.
alwillis 6y ago
Can IT control what is allowed to be applied and what is not? Sure can. But that's true only if these machines are part of IT's infrastructure, which is usually the case at large companies. A lot of places are BYOD and don't have employee Macs on Active Directory. For $20 bucks, any office or group with a spare Mac can use macOS Server to control this stuff: https://www.apple.com/macos/server/features/ https://www.apple.com/macos/server/features/
userbinator 6y ago
Isn’t security the biggest reason for most? Given some of the horrible security bugs found very shortly after the last few versions of MacOS were released... I strongly disagree. The saying about known unknowns and unknown unknowns is quite relevant.

throwaway201103 6y ago

Typically they will use Caspar, now called Jamf Pro. https://www.jamf.com/products/jamf-pro/ https://www.jamf.com/products/jamf-pro/

jlgaddis 6y ago

> Isn’t security the biggest reason for most? I don't think that's the biggest reason to upgrade to a new major (or even minor) version, especially when the previous release(s) are still supported for quite some time. Catalina, macOS 10.15, for example, didn't stop being supported when Bug Sur, 11.0, was released. In fact, it will still be supported for quite some time. Mojave, 10.14, is supported until late next year and, High Sierra, 10.13, is still supported even today! Unless there's some new feature that you absolutely just must have, there just really isn't any compelling enough reason for most folks to immediately upgrade to a new .0 release. In the Windows world, the conventional wisdom -- for probably a decade and a half! -- has been to wait until after SP1 to move to a new major version. Maybe the younger generation just hasn't been burned (bad) enough (yet) for them to learn not to touch the stove?

happymellon 6y ago
But in every other world you can always boot from a recovery USB and fix it, nothing is usually "bricked". Not so with newer Mac's so the risk has intensified.

alwillis 6y ago

Can IT control what is allowed to be applied and what is not? Sure can. But that's true only if these machines are part of IT's infrastructure, which is usually the case at large companies. A lot of places are BYOD and don't have employee Macs on Active Directory. For $20 bucks, any office or group with a spare Mac can use macOS Server to control this stuff: https://www.apple.com/macos/server/features/ https://www.apple.com/macos/server/features/

userbinator 6y ago

Isn’t security the biggest reason for most? Given some of the horrible security bugs found very shortly after the last few versions of MacOS were released... I strongly disagree. The saying about known unknowns and unknown unknowns is quite relevant.