Updated title for Yosemite / 10.10, the issue remains the same.
This is mostly a moot point for our organization as we're starting to let more and more people upgrade to Mavericks as they desire, however I suspect 10.10 will have similar promotion within the App store once it's released so I'm asking anyway.
For the past few months we've pushed our users to not upgrade to Mavericks which has for the most part been effective with only 3 or 4 (out of almost 200) installing it without checking with us first. Over the past few weeks though I've seen that number rise dramatically though as people install it thinking it's just a software update. We've trained our users to install Apple software updates whenever they are prompted, thanks in part to us blocking and releasing updates through our internal software update server, so we may be partially to blame for this.
The problem as I see it is that Apple is pushing Mavericks using advertising in the Software Update section of the Mac App Store. End users see this (see below) and think "Oh, this is just another update, they must've cleared it for us to use", which isn't necessarily the case.
Have any other Mac admins successfully combatted this, either through blocking it from appearing in the Software Update section or by re-training their end users? I've had the thought about killing the path to Apple (swcdn.apple.com) but white listing our Mac Pro server to still allow access for our SUS. I don't like this idea though because we think this would also affect purchasing new apps on both Mac and iOS for the rest of the devices.
Best Answer
Yes. I have had pretty good success with this method I describe below.
Disable Mac App Store
The App Store is simply not suitable for administration. Barely a quasi-package manager, it is not nearly as useful or reliable as real package managers like pkgsrc, FreeBSD ports, aptitude, RPM, macports or even softwareupdate. In my experience, it is unpredictable and a beard for commercial developers to hock their wares. So there is really only one rational and responsible way, as a competent administrator, to work with App Store:
And just put it out of your mind, it won't trouble you any longer. ;-)
Use Apple Remote Desktop Admin
Use ARD instead, though not a package manager, it manages packages, installations, updates, and upgrades, it will do what you want, save you time, and will not let you down:
For Apple Remote Desktop 3, for 10.9:
Check out the admin guide first to convince yourself that this is the way to go:
Then install:
but that might throw a funny error if not running 10.9, or if no previous version of ARD is installed, and if it does, try:
or to equal effect (either/or here, don't need to use both pkgutil and xar... I'm just being thorough):
And we no longer need the disk image attached, so eject it:
And now what you'll see if you
is
What's in the Payload file, which is a cpio archive compressed with gzip, is what you're after. So with a few piped commands we can get to the app bundle:
returns:
And you're nearly done.
Now you have installed Apple Remote Desktop Admin 3.7.2
So all that's left to do is purchase your license:
Launch /Applications/Remote\ Desktop.app and serialize. And get some work done.
For 10.6 Snow Leopard, you'll need a slightly earlier version of ARD:
and if it throws back at you this:
then try:
drill down to the Payload:
returns:
So run:
returns:
And you're nearly done:
purchase your license:
Launch /Applications/Remote\ Desktop.app and serialize. And get something done.
Remove users' admin rights
Also, you may want to deeply consider removing admin rights for your users; although this will create more work for you if your users often need to authenticate with admin passwords, it may also help prevent "bad things." And if you have ARD installed, you can connect to their logins from your desk to authenticate for them remotely.