SOTI Pulse Logo

Best way to disable OS upgrades for Android Enterprise?

DP
Daniel P
Abetech - Managed Services

Good afternoon. 

Some of our Android Enterprise devices have started updating to Android 12. Our devices are Samsung Tab A7 Lite. I checked our Enterprise profile which contains our feature control and configurations. I was not able to find an option to Disable OS upgrades. 

We also have older devices enrolled in Android Plus and the feature control for this profile does have an option to disable OS upgrades. 

Is there a policy script I could send to our Enterprise Tab A7 lite to disable the upgrade? I am okay if the script expires after a set number of days. I am going to continue reading through the forums to see if I can find a good solution.

I am also wondering if there is a script available to disable the new android 12 permissions setting "Remove permissions if app is unused"

And 12 screenshot

Samsung Tab a7 lite OS upgrade ANDROID ENTERPRISE permissions samsung scripts disable
3 years ago
Android Scripting
ANSWERS
RC
Raymond Chan Diamond Contributor
3 years ago

Depending on your Android firmware and device agent version, use either

   set_system_update_policy

OR

  writeprivateprofstring SystemUpdatePolicy SystemUpdatePolicy

as documented on-line at

    https://www.soti.net/mc/help/v15.6/en/scriptcmds/reference/androidplus_enterprise_do.html

and

    https://www.soti.net/mc/help/v15.6/en/scriptcmds/reference/writeprivateprofstring.html

respectively.

D
DJMOD@SOTI
3 years ago

Hi Daniel,


Thanks for requesting a response from SOTI Support Staff,
Thank you very much Raymond for providing the inputs and link in the response.
Please find more details on blocking system update using profile by clicking the link here

B
Bob
3 years ago

the system policy setting that soti has does not totally block OS updates as the settings only allow for schedule/postpone and support suggested to create a scheduled windows so short that it will not have time to upgrade but it was not full proof.  we have a large number samsung devices locked down in the field including the A7 Lite and we absolutely can't have any upgrades in the field so we use application run control to block the updates.  our A7's are on Andorid 11 and for our requirements we blacklist package com.samsung.sdm to block all system updates.

Similar Discussions