How to Block all OS and App updates in Android Enterprise Work Managed ?
Do you mean once the rule is created or after it has been created and assigned to the devices?
As of MobiControl v14.2 there is a new Android Enterprise payload called "Managed Google Play" that will allow you to block all application updates from the Managed Google Play Store. This link can provide you with more detail.
As for blocking all Android OS updates, we have a means to partially block OS upgrades on Android Enterprise Work Managed devices using the following script command:
Syntax: set_system_update_policy <policy type> [start time] [end time]
Example: set_system_update_policy 2 180 360
Note: The script will expire after 30 days, the device will then revert back to "Automatic Updates"
can we execute again the script to reblock OS updates after 30 days?
Based on my brief test last week on a device with patch, it seems that the 30-day period is computed with reference to the firmware patch release date rather than the script execution date. If so, running the script again has no effect. A POSSIBLE workaround may be to set a 1-minute daily upgrade window at odd hours to effectively block any firmware upgrade with the same script command but different policy type & appropriate time arguments.