Block Microsoft Updates Mac

-->

Jan 11, 2019 If you discover your system isn’t compatible with a new Windows 10 Feature Update, here is how you can block it from installing. Microsoft’s Show or Hide Updates tool can be a first line.

  • Jul 03, 2019  Microsoft offers a workaround, of sorts, to the block. 'Updating your Apple Boot Camp Windows Support Software drivers may allow you to update to Windows 10, version 1903,' it.
  • Oct 18, 2019 If any updates are available, click the Update Now button to install them. Or click ”More info” to see details about each update and select specific updates to install. When Software Update says that your Mac is up to date, the installed version of macOS and all of its apps are also up to date.
Block Microsoft Updates Mac

Office for Mac that comes with an Office 365 subscription is updated on a regular basis to provide new features, security updates, and non-security updates. The following information is primarily intended for IT professionals that are deploying Office for Mac to the users in their organizations.

Note

  • Starting with Version 16.21, Microsoft Teams will be installed by default for new installations if you're using the Office suite install package. For more information, see Microsoft Teams installations on a Mac.
  • For security reason, Microsoft has deprecated the use of SHA-1. Learn more
  • Starting with the 16.17 release in September 2018, this information also applies to Office 2019 for Mac, which is a version of Office for Mac that’s available as a one-time purchase from a retail store or through a volume licensing agreement.
  • The update history information for version 16.16 and earlier also applies to Office 2016 for Mac, which is also a version of Office for Mac that’s available as a one-time purchase. Older versions up to and including 16.16 can be activated with an Office 2016 for Mac volume license. You can’t activate version 16.17 or later with an Office 2016 for Mac volume license. For information about Office 2016 for Mac releases from September onward, see Release notes for Office 2016 for Mac
  • For information about the features, security updates, and non-security updates that are included in a given release of Office for Mac, see Release notes for Office for Mac.
  • If you want early access to new releases, join the Office Insider program.

Most current packages for Office for Mac

The following table lists the most current packages for the Office suite and for the individual applications. The Office suite includes all the individual applications, such as Word, PowerPoint, and Excel. All packages are 64-bit only. The build date is listed in parentheses, in a YYMMDD format, after the version number. The install package is used if you don't have the application already installed, while the update package is used to update an existing installation.

To view release notes, see Release notes.

March 10, 2020

Version 16.35 (20030802)

ApplicationDownload linksSHA-256 hash for install package
Office suite (with Teams)Install package8E86CC3EDDB5D7AD0EBA34264C6017D8B3DB9BBC425106F8C5B1BBAC1C7966DA
Office suite (without Teams)Install packageDA6F028AB5A69FC48668A311A74231A9CDCDA1576D2EBB1C06E7A7DD53ED8510
WordInstall package
Update package
27BB4CAD84F7E15AA5E0AB48C18E620F08A4AA1AF05352847E8AA8924390005F
ExcelInstall package
Update package
DFE5F4230DC3E4B85FF226E260580FBD5A85893DD17C6165721F92A03FDFDF91
PowerPointInstall package
Update package
65292F7CDA8C53FB796332B84398F3A4528831CCED9E7E5614A778055F7683AF
OutlookInstall package
Update package
92094986AE997694549E9FA54347663F4720B7842D6E5FF7525BBB4897EB5C94
OneNoteUpdate packageNot applicable

Most current packages for other Mac programs from Microsoft

The following table provides information about the most current packages, including a download link, for other Mac programs from Microsoft that may be of interest to IT professionals. The build date is listed in parentheses, in a YYMMDD format, after the version number.

Note: Microsoft AutoUpdate (MAU) release information has moved to the MAU Release History page.

ProgramVersionPackageMore informationSHA-1/ SHA-256 hash
Skype for Business
16.27.37
Download
The latest version was released on June 23, 2019.
Latest updates
ac33fbfa83e304e1ac3ba7365e8bf307b117ec954fd48902991356ee86f2e836
Remote Desktop10.3.1DownloadThis install package is 64-bit.
What's new
a846cecda7391b4e67c37b4b30a0c49ebd3c80f4782a989c0b4f866cd6d09339
Intune Company Portal1.17 (52.1908008.000) [190823]DownloadWhat's new in Microsoft Intunefec704b5194360a48365d0193a46135358c5f129fc2b1fb02acb902cd1f96de0
Microsoft SharePoint On-Premises Safari Browser Plugin for Office 2016 for Mac
15.32.0 (170309)
Download
This install package is 64-bit.
f7f29202881a319fb249d15ab6125b5a1a94b303c649cbe3fafb37ecd4728ed8

Release history for Office for Mac

The following table provides release history information and download links for Office for Mac. The table is ordered by release date, with the most recent release date listed first. The build date is listed in parentheses, in a YYMMDD format, after the version number. All releases after August 22, 2016 are 64-bit only. All releases prior to August 22, 2016 are 32-bit only.

Note

Download links are only provided for the most recent releases.

Release dateVersionInstall packageUpdate packages
March 10, 202016.35 (20030802)Office suite (with Teams)
Office suite (without Teams)
Word, Excel, PowerPoint, Outlook, OneNote
February 11, 202016.34 (20020900)Office suite (with Teams)
Office suite (without Teams)
Word, Excel, PowerPoint, Outlook, OneNote
January 14, 202016.33 (20011301)Office suite (with Teams)
Office suite (without Teams)
Word, Excel, PowerPoint, Outlook, OneNote
December 10, 2019
16.32 (19120802)
Office suite (with Teams)
Office suite (without Teams)
Word, Excel, PowerPoint, Outlook, OneNote
November 12, 2019
16.31 (19111002)
Office suite (with Teams)
Office suite (without Teams)
Word, Excel, PowerPoint, Outlook, OneNote
October 15, 2019
16.30 (19101301)
Office suite (with Teams)
Office suite (without Teams)
Word, Excel, PowerPoint, Outlook, OneNote
September 18, 2019
16.29.1 (19091700)
Word, Excel, PowerPoint
September 10, 2019
16.29 (19090802)
Office suite (with Teams)
Office suite (without Teams)
Word, Excel, PowerPoint, Outlook, OneNote
August 13, 2019
16.28 (19081202)
Office suite (with Teams)
Office suite (without Teams)
Word, Excel, PowerPoint, Outlook, OneNote
July 16, 2019
16.27 (19071500)
Office suite (with Teams)
Office suite (without Teams)
Word, Excel, PowerPoint, Outlook, OneNote
June 11, 2019
16.26 (19060901)

May 14, 2019
16.25 (19051201)

April 16, 2019
16.24 (19041401)

March 27, 2019
16.23.1 (19032603)
March 12, 2019
16.23.0 (19030902)

February 20, 2019
16.22 (19022000)


January 24, 2019
16.21 (19011700)
January 16, 2019
16.21 (19011500)
December 11, 2018
16.20 (18120801)
November 13, 2018
16.19 (18110915)
October 16, 2018
16.18 (18101400)
September 11, 2018
16.17 (18090901)
August 14, 2018
16.16 (18081201)
July 10, 2018
16.15 (18070902)
June 13, 2018
16.14.1 (18061302)
June 12, 2018
16.14.0 (18061000)
May 24, 2018
16.13.1 (18052304)
May 23, 2018
16.13.1 (18052203)
May 15, 2018
16.13.0 (18051301)
April 11, 2018
16.12.0 (18041000)
March 19, 2018
16.11.1 (18031900)
March 13, 2018
16.11.0 (18031100)
February 13, 2018
16.10.0 (18021001)
January 26, 2018
16.9.1 (18012504)
January 18, 2018
16.9.0 (18011602)
December 12, 2017
15.41.0 (17120500)
November 14, 2017
15.40.0 (17110800)
October 10, 2017
15.39.0 (17101000)
September 12, 2017
15.38.0 (17090200)
August 15, 2017
15.37.0 (17081500)
July 21, 2017
15.36.1 (17072101)
July 11, 2017
15.36.0 (17070200)
June 16, 2017
15.35.0 (17061600)
June 13, 2017
15.35.0 (17061000)
May 16, 2017
15.34.0 (17051500)
April 11, 2017
15.33.0 (17040900)
March 14, 2017
15.32.0 (17030901)
February 16, 2017
15.31.0 (17021600)
January 11, 2017
15.30.0 (17010700)
-->

This article lists and describes the different settings you can control on macOS devices. As part of your mobile device management (MDM) solution, use these settings to allow or disable features, set password rules, allow or restrict specific apps, and more.

These settings are added to a device configuration profile in Intune, and then assigned or deployed to your macOS devices.

Before you begin

Create a device restrictions configuration profile.

Note

These settings apply to different enrollment types. For more information on the different enrollment types, see macOS enrollment.

General

Settings apply to: Device enrollment and Automated device enrollment

  • Definition Lookup: Block prevents user from highlighting a word, and then looking up its definition on the device. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow the definition lookup feature.

  • Dictation: Block stops users from using voice input to enter text. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow users to use dictation input.

  • Content caching: Block prevents content caching. Content caching stores app data, web browser data, downloads, and more locally on devices. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might enable content caching.

    For more information on content caching on macOS, see Manage content caching on Mac (opens another website).

    This feature applies to:

    • macOS 10.13 and newer
  • Defer software updates: Enable allows you to delay when software updates are shown on devices, from 0-90 days. This setting doesn't control when updates are or aren't installed. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might show updates on devices as Apple releases them. For example, if a macOS update gets released by Apple on a specific date, then that update naturally shows up on devices around the release date. Seed build updates are allowed without delay.

    • Delay visibility of software updates: Enter a value from 0-90 days. When the delay expires, users get a notification to update to the earliest version of the OS available when the delay was triggered.

      For example, if a macOS update is available on January 1, and Delay visibility is set to 5 days, then the update isn't shown as an available update. On the sixth day following the release, that update is available, and users can install it.

      This feature applies to:

      • macOS 10.13.4 and newer
  • Screenshots: Device must be enrolled in Apple's Automated Device Enrollment (DEP). Block prevents users from saving screenshots of the display. It also prevents the Classroom app from observing remote screens. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow users to capture screenshots, and allows the Classroom app to view remote screens.

Settings apply to: Automated device enrollment

  • Remote screen observation through Classroom app: Disable prevents teachers from using the Classroom app to see their students' screens. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow teachers to see their students' screens.

    To use this setting, set the Screenshots setting to Not configured (screenshots are allowed).

  • Unprompted screen observation by Classroom app: Allow lets teachers see their students' screens without requiring students to agree. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might require students to agree before teachers can see the screens.

    To use this setting, set the Screenshots setting to Not configured (screenshots are allowed).

  • Students must request permission to leave Classroom class: Require forces students enrolled in an unmanaged Classroom course to get teacher approval to leave the course. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow students to leave the course whenever the student chooses.

  • Teachers can automatically lock devices or apps in the Classroom app: Allow lets teachers lock a student's device or app without the student's approval. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might require students agree before teachers can lock the device or app.

  • Students can automatically join Classroom class: Allow lets students join a class without prompting the teacher. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might require teacher approval to join a class.

Password

Settings apply to: Device enrollment and Automated device enrollment

  • Password: Require users to enter a password to access devices. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might not require a password. It also doesn't force any restrictions, such as blocking simple passwords or setting a minimum length.

    • Required password type: Enter the required password complexity level your organization requires. Your options:

      • Not configured: Intune doesn't change or update this setting.
      • Numeric: Password must only be numbers, such as 123456789.
      • Alphanumeric: Includes uppercase letters, lowercase letters, and numeric characters.

      This feature applies to:

      • macOS 10.10.3 and newer
    • Number of non-alphanumeric characters in password: Enter the number of complex characters required in the password, from 0-4. A complex character is a symbol, such as ?

    • Minimum password length: Enter the minimum length the password must have, from 4-16 characters.

    • Simple passwords: Allow using simple passwords, such as 0000 or 1234.

    • Maximum minutes after screen lock before password is required: Enter the length of time devices must be inactive before a password is required to unlock it. When the value is blank or set to Not configured, Intune doesn't change or update this setting.

    • Maximum minutes of inactivity until screen locks: Enter the length of time devices must be idle before the screen is automatically locked. For example, enter 5 to lock devices after 5 minutes of being idle. When the value is blank or set to Not configured, Intune doesn't change or update this setting.

    • Password expiration (days): Enter the number of days until the device password must be changed, from 1-65535. For example, enter 90 to expire the password after 90 days. When the password expires, users are prompted to create a new password. When the value is blank, Intune doesn't change or update this setting.

    • Prevent reuse of previous passwords: Use this setting to restrict users from creating previously used passwords. Enter the number of previously used passwords that can't be used, from 1-24. For example, enter 5 so users can't set a new password to their current password or any of their previous four passwords. When the value is blank, Intune doesn't change or update this setting.

  • Block User from Modifying Passcode: Block stops the passcode from being changed, added, or removed. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow passcodes to be added, changed, or removed.

  • Block Fingerprint Unlock: Block prevents using fingerprints to unlock devices. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow users to unlock the device using a fingerprint.

  • Block password AutoFill: Block prevents using the AutoFill Passwords feature on macOS. Choosing Block also has the following impact:

    • Users aren't prompted to use a saved password in Safari or in any apps.
    • Automatic Strong Passwords are disabled, and strong passwords aren't suggested to users.

    When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow these features.

  • Block password proximity requests: Block prevents devices from requesting passwords from nearby devices. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow these password requests.

  • Block password sharing: Block prevents sharing passwords between devices using AirDrop. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow passwords to be shared.

Built-in Apps

Settings apply to: Device enrollment and Automated device enrollment

  • Block Safari AutoFill: Block disables the autofill feature in Safari on devices. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow users to change autocomplete settings in the web browser.

  • Block Camera: Block prevents access to the camera on devices. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow access to the device camera.

    Intune only manages access to the device camera. It doesn't have access to pictures or videos.

  • Block Apple Music: Block reverts the Music app to classic mode, and disables the Music service. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow using the Apple Music app.

  • Block Spotlight Internet Search Results: Block stops Spotlight from returning any results from an Internet search. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow Spotlight search to connect to the Internet, and get search results.

    Nov 27, 2016  Try running a scan to see if something has moved into your computer. Microsoft Security Essentials might be good for you to try. If you boot into safe mode with networking, and open Money, things would normally go slower than with a regular boot. If things go faster that way, that could help point to a problem. Enter to Search. Microsoft Money Plus Sunset Deluxe. See Money Plus Sunset EULA and Microsoft's Support Lifecycle pages for more details). No need to activate the product. Aug 01, 2016  I am currently using MS Money Sunset version on my iMac running on Win 7 under VMWare Fusion. I want to get away from using MS Money and want to move to Quicken for Mac. Nov 30, 2014  Name the application “Microsoft Money” and click OK. Now run your “Microsoft Money” application to launch the Wineskin settings dialog. Click “Install Software”, and point to the Microsoft Money installer. This will install the software into your Wineskin app. Microsoft money sunset for mac. Click on “View wrapper in Finder” and it will take you to where the Microsoft Money wrapper is installed which is in the Wineskin folder in Applications. Quit the Wineskin Winery App. Then double click on the Microsoft Money Wineskin icon that was created and the Microsoft Money Wineskin installer.

  • Block File Transfer using iTunes: Block disables application file sharing services. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow application file sharing services.

    This feature applies to:

    • macOS 10.13 and newer

Restricted apps

Settings apply to: Device enrollment and Automated device enrollment

  • Type of restricted apps list: Create a list of apps that users aren't allowed to install or use. Your options:

    • Not configured (default): Intune doesn't change or update this setting. By default, users might have access to apps you assign, and built-in apps.
    • Prohibited apps: List the apps (not managed by Intune) that users aren't allowed to install and run. Users aren't prevented from installing a prohibited app. If a user installs an app from this list, it's reported in Intune.
    • Approved apps: List the apps that users are allowed to install. To stay compliant, users must not install other apps. Apps that are managed by Intune are automatically allowed, including the Company Portal app. Users aren't prevented from installing an app that isn't on the approved list. But if they do, it's reported in Intune.
  • App Bundle ID: Enter the app bundle ID of the app you want. You can show or hide built-in apps and line-of-business apps. Apple's web site has a list of built-in Apple apps.

  • App name: Enter the app name of the app you want. You can show or hide built-in apps and line-of-business apps. Apple's web site has a list of built-in Apple apps.

  • Publisher: Enter the publisher of the app.

To add apps to these lists, you can:

  • Add: Select to create your list of apps.
  • Import a CSV file with details about the app, including the URL. Use the <app bundle ID>, <app name>, <app publisher> format. Or, Export to create a list of apps you added, in the same format.

Connected devices

Settings apply to: Device enrollment and Automated device enrollment

  • Block AirDrop: Block prevents using AirDrop on devices. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow using the AirDrop feature to exchange content with nearby devices.
  • Block Apple Watch Auto Unlock: Block prevents users from unlocking their macOS device with their Apple Watch. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow users to unlock their macOS device with their Apple Watch.

Cloud and storage

Settings apply to: Device enrollment and Automated device enrollment

  • Block iCloud Keychain sync: Block disables syncing credentials stored in the Keychain to iCloud. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow users to sync these credentials.

  • Block iCloud Document Sync: Block prevents iCloud from syncing documents and data. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow document and key-value synchronization to your iCloud storage space.

  • Block iCloud Mail Backup: Block prevents iCloud from syncing to the macOS Mail app. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow Mail synchronization to iCloud.

  • Block iCloud Contact Backup: Block prevents iCloud from syncing the device contacts. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow contact sync using iCloud.

  • Block iCloud Calendar Backup: Block prevents iCloud from syncing to the macOS Calendar app. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow Calendar synchronization to iCloud.

    Microsoft office utilities update for mac. Update Office from the Mac App Store. If you downloaded Office from the Mac App Store, and have automatic updates turned on, your apps will update automatically. But you can also manually download the updates: Open the Mac App Store from your Dock or Finder.

  • Block iCloud Reminder Backup: Block prevents iCloud from syncing to the macOS Reminders app. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow Reminders synchronization to iCloud.

  • Block iCloud Bookmark Backup: Block prevents iCloud from syncing the device Bookmarks. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow Bookmark synchronization to iCloud.

  • Block iCloud Notes Backup: Block prevents iCloud from syncing the device Notes. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow Notes synchronization to iCloud.

  • Block iCloud Photo Library: Block disables iCloud Photo Library, and prevents iCloud from syncing the device photos. Any photos not fully downloaded from iCloud Photo Library are removed from local storage on devices. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow syncing photos between the device and the iCloud Photo Library.

  • Handoff: This feature allows users to start work on a macOS device, and then continue the work they started on another iOS/iPadOS or macOS device. Block prevents the Handoff feature on devices. When set to Not configured (default), Intune doesn't change or update this setting. By default, the OS might allow this feature on devices.

    This feature applies to:

    • macOS 10.15 and newer

Domains

Settings apply to: Device enrollment and Automated device enrollment

Microsoft Mac Downloads

  • Email Domain URL: Add one or more URLs to the list. When users receive an email from a domain other than one you configured, the email is marked as untrusted in the macOS Mail app.

Next steps

Mac Microsoft Updates Available

Assign the profile and monitor its status.

Block Microsoft Updates Mac Desktop

You can also restrict device features and settings on iOS/iPadOS devices.