If you have decided to disable the automatic update function of XProtect, then you will need a method for deploying the configuration files yourself. These configuration files tell XProtect what the minimum allowed version is for the given plugins. If the version of the installed plugin is less than this minimum version, it is not allowed to run. This is a great security feature, but the sad truth is that many enterprise environments rely on old versions of Java and/or Flash. Tim Sutton has made a utility that downloads the XProtect settings plists and creates a package for you. You can hold back the XProtect settings that Apple has been pushing until you have the new flash or Java in place and then still be able to apply them on your machines. Thanks to Tim for this extremely handy tool!
Nate Walck
Nate is a Systems Reliability Engineer at Dropbox, Inc in San Francisco, CA. He runs afp548.com along with Sam Keeley and is one of the founding members of the ##osx-server IRC channel on freenode.net. He loves being involved in the Mac Admin community and using Open Source projects whenever possible, especially Munki, The Luggage and Puppet.
Follow Me:
by 
Recent Comments