There is not only the MS autoupdate: OneDrive has its own version of updater. So you want to deny this.
You can use terminal commands on macOS to effectively stop OneDrive (and Microsoft’s update service) from installing new versions. It’s never 100% guaranteed, but in practice it’s “very safe.”
Below is a set of measures you can apply, depending on how strict you want to be.
1. Disable Microsoft AutoUpdate via LaunchAgents
Microsoft AutoUpdate (MAU) usually runs on macOS via LaunchAgents.
- Open Terminal.
- Check whether an AutoUpdate LaunchAgent exists:
ls ~/Library/LaunchAgents
ls /Library/LaunchAgents
It often has a name like com.microsoft.update.agent.plist or something similar.
3. Once you know the exact name, you can unload it:
launchctl bootout gui/$UID ~/Library/LaunchAgents/com.microsoft.update.agent.plist
sudo launchctl bootout system /Library/LaunchAgents/com.microsoft.update.agent.plist
- Optionally, rename the
.plist files so they won’t be loaded again on the next boot:
mv ~/Library/LaunchAgents/com.microsoft.update.agent.plist \
~/Library/LaunchAgents/com.microsoft.update.agent.plist.disabled
sudo mv /Library/LaunchAgents/com.microsoft.update.agent.plist \
/Library/LaunchAgents/com.microsoft.update.agent.plist.disabled
This prevents the AutoUpdate service from starting automatically at all.
2. Make the Microsoft AutoUpdate app unusable
If MAU is installed as an app (often under /Library/Application Support/Microsoft/MAU2.0 or similar), you can “neutralize” it with Terminal.
- Check the directory:
ls "/Library/Application Support/Microsoft"
- Rename the MAU folder or remove execute permissions, for example:
sudo mv "/Library/Application Support/Microsoft/MAU2.0" \
"/Library/Application Support/Microsoft/MAU2.0.disabled"
or more minimally:
sudo chmod -x "/Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/Microsoft AutoUpdate"
Without a working MAU binary, OneDrive usually cannot download or apply updates.
3. “Freeze” the OneDrive app itself using permissions
You can also configure the OneDrive app so that nothing else can overwrite it by limiting write permissions.
- Find the path of the OneDrive app (Standalone version):
mdfind kMDItemCFBundleIdentifier="com.microsoft.OneDrive"
For the Mac App Store version, the bundle identifier is com.microsoft.OneDrive-mac.
2. Assuming the app is at /Applications/OneDrive.app, you can make it read‑only:
sudo chown root:wheel /Applications/OneDrive.app
sudo chmod -R a-w /Applications/OneDrive.app
This way, no regular process can overwrite the app without using sudo.
If you later want to change or uninstall it yourself, restore write permissions:
sudo chmod -R u+w /Applications/OneDrive.app
sudo chown -R "$USER":staff /Applications/OneDrive.app
To prevent a future installer from blindly overwriting /Applications/OneDrive.app, you can rename the app:
sudo mv /Applications/OneDrive.app /Applications/OneDrive-26.055.app
Many installers specifically look for OneDrive.app. If they don’t find it, they will install a new version alongside your renamed legacy app, which makes it easy for you to spot and remove the new version while keeping your old one intact.
5. Practical limits
- Microsoft does not provide an official switch like “never update this version,” especially not for unsupported macOS versions.
- By combining
- unloading/renaming the LaunchAgents,
- disabling the MAU binary, and
- write‑protecting or renaming the OneDrive app,
you can in practice achieve the goal that your installed version does not update itself.