Skip to main content
Question

Blueprints Software Updates Settings deferral

  • September 18, 2026
  • 15 replies
  • 75 views

Forum|alt.badge.img+3

Hi, I’ve configured this Blueprint on the 14th September with a deferral of 90 days for macOS Golden Gate. I’ve only scoped macOS 15 & 26. I’ve only excluded my machine. Everything seemed fine but now today I check my dashboard and I see 2 user’s machine’s have been upgraded to 27. Why, how? I’m pretty annoyed now by this

 

15 replies

ktrojano
Forum|alt.badge.img+22
  • Jamf Heroes
  • September 18, 2026

Hi ​@Cephas are your users allowed to install Beta versions. We had one of our users install the Beta of 27 before we put the deferral in place. 


Chris_Hafner
Forum|alt.badge.img+27
  • Jamf Heroes
  • September 18, 2026

I had two make it through because I missed the deferral setting before they cached the install on the 14th. Apple got this one out fast!


Forum|alt.badge.img+16
  • Valued Contributor
  • September 18, 2026

@Cephas I ran into a similar issue with this. I had my setting for 90 days as well but when I checked on my test device I could still see macOS 27 available in Software Updates. I found there was another setting I had to make under a different component. 

I have “Software Update Settings” component configured as well as “Software Updates”. In the Software Updates component in the blueprint I had the “Enforcement type” set to “Latest OS version”. Once I checked the box “Ignore major versions” under “Enforce the latest OS update within a defined period after release” then I noticed that macOS 27 no longer showed as a download on my test Mac.

Check the box “Ignore major versions” under “Enforce the latest OS update within a defined period after release” that is located in the “Software Updates” component.

Hope this helps!
 


Forum|alt.badge.img+3
  • Author
  • Contributor
  • September 18, 2026

@Cephas I ran into a similar issue with this. I had my setting for 90 days as well but when I checked on my test device I could still see macOS 27 available in Software Updates. I found there was another setting I had to make under a different component. 

I have “Software Update Settings” component configured as well as “Software Updates”. In the Software Updates component in the blueprint I had the “Enforcement type” set to “Latest OS version”. Once I checked the box “Ignore major versions” under “Enforce the latest OS update within a defined period after release” then I noticed that macOS 27 no longer showed as a download on my test Mac.

Check the box “Ignore major versions” under “Enforce the latest OS update within a defined period after release” that is located in the “Software Updates” component.

Hope this helps!
 

Hi That’s exactly how I already have it configured. I kinda named the Blueprint similarly if you check in the background of my pic


Forum|alt.badge.img+3
  • Author
  • Contributor
  • September 18, 2026

Hi ​@Cephas are your users allowed to install Beta versions. We had one of our users install the Beta of 27 before we put the deferral in place. 

Hi, nope, we are not enrolled in that Beta Program


Forum|alt.badge.img+3
  • Author
  • Contributor
  • September 18, 2026

I had two make it through because I missed the deferral setting before they cached the install on the 14th. Apple got this one out fast!

Everything seemed fine for me from Monday the 14th when I enabled the deferral ( Or perhaps I even enabled it on Sunday already. Can’t remember) but now today (Friday) I check my Jamf Pro dashboard and 2 users upgraded. Yesterday I checked it and it was still just solely me on Golden Gate in the whole Org. I hate to say I’m really annoyed now. Could it be that the Blueprint and it’s configurations never activated yet? When I check deployment status I see there’s 20 devices pending. We have about 190 devices in our org. And, I see there 1 device with an error


Forum|alt.badge.img+16
  • Valued Contributor
  • September 18, 2026

@Cephas I ran into a similar issue with this. I had my setting for 90 days as well but when I checked on my test device I could still see macOS 27 available in Software Updates. I found there was another setting I had to make under a different component. 

I have “Software Update Settings” component configured as well as “Software Updates”. In the Software Updates component in the blueprint I had the “Enforcement type” set to “Latest OS version”. Once I checked the box “Ignore major versions” under “Enforce the latest OS update within a defined period after release” then I noticed that macOS 27 no longer showed as a download on my test Mac.

Check the box “Ignore major versions” under “Enforce the latest OS update within a defined period after release” that is located in the “Software Updates” component.

Hope this helps!
 

Hi That’s exactly how I already have it configured. I kinda named the Blueprint similarly if you check in the background of my pic

You have this checked as well?
 

 


Chris_Hafner
Forum|alt.badge.img+27
  • Jamf Heroes
  • September 18, 2026

Have you checked the API for any errors on those? Without the declaration, there could be other behaviors keeping them moving forward. 


mvu
Forum|alt.badge.img+23
  • Jamf Heroes
  • September 18, 2026

Do you have a restricted software in place to block the app installer? 

Thinking of another avenue. Did the user boot from external hard drive and upgrade?

 


Forum|alt.badge.img+3
  • Author
  • Contributor
  • September 18, 2026

Have you checked the API for any errors on those? Without the declaration, there could be other behaviors keeping them moving forward. 

I’m still trying to learn how to check that😭


Forum|alt.badge.img+3
  • Author
  • Contributor
  • September 18, 2026

@Cephas I ran into a similar issue with this. I had my setting for 90 days as well but when I checked on my test device I could still see macOS 27 available in Software Updates. I found there was another setting I had to make under a different component. 

I have “Software Update Settings” component configured as well as “Software Updates”. In the Software Updates component in the blueprint I had the “Enforcement type” set to “Latest OS version”. Once I checked the box “Ignore major versions” under “Enforce the latest OS update within a defined period after release” then I noticed that macOS 27 no longer showed as a download on my test Mac.

Check the box “Ignore major versions” under “Enforce the latest OS update within a defined period after release” that is located in the “Software Updates” component.

Hope this helps!
 

Hi That’s exactly how I already have it configured. I kinda named the Blueprint similarly if you check in the background of my pic

You have this checked as well?
 

 

Yep
 


 


Forum|alt.badge.img+3
  • Author
  • Contributor
  • September 18, 2026

Do you have a restricted software in place to block the app installer? 

Thinking of another avenue. Did the user boot from external hard drive and upgrade?

 

Nope, this is all we restrict for now

And no. I know those two user’s. The one is an intern. They wont do or know about doing such a thing I’m pretty confident about that
 


mvu
Forum|alt.badge.img+23
  • Jamf Heroes
  • September 18, 2026

Be worth adding a Restricted Software to block the installer.

You reminded me on something -- 🤣

I created a smart group and to notify me if/when someone downloads the Golden Gate installer… I duplicated my old one from last year.

 

 


Forum|alt.badge.img+3
  • Author
  • Contributor
  • September 18, 2026

Be worth adding a Restricted Software to block the installer.

You reminded me on something -- 🤣

I created a smart group and to notify me if/when someone downloads the Golden Gate installer… I duplicated my old one from last year.

 

 

Ok, I see. Thanks much ​@mvu I’ll do that now😊


shrisivakumaran
Forum|alt.badge.img+10

Blueprint will take effect from macOS 27, have you placed deferral in configuration profile under restriction payload?