Skip to main content
Question

macOS Security updates, what's the best way?

  • February 21, 2023
  • 2 replies
  • 23 views

Forum|alt.badge.img+5

What's the best way to push out macOS Security updates to the macs via Jamf? I'm trying to configure so all the macs in my org can get the security patches as they're released from Apple.

2 replies

pete_c
Forum|alt.badge.img+16
  • Honored Contributor
  • 258 replies
  • February 21, 2023

Check out Nudge, erase-install, and SUPER.  The 'Send Remote Commands' MDM payloads are improving but still not very reliable, and depending upon the version of macOS on your enrolled devices, the notifications and deferral options may be unclear or easy for users to miss.

 

The days of uploading then distributing / pushing 'Combo Updates' etc are over. Think of this as a process that needs to be managed on each device that will likely involve the user, not as a package to be installed.


Forum|alt.badge.img+10
  • Valued Contributor
  • 193 replies
  • February 22, 2023

Check out Nudge, erase-install, and SUPER.  The 'Send Remote Commands' MDM payloads are improving but still not very reliable, and depending upon the version of macOS on your enrolled devices, the notifications and deferral options may be unclear or easy for users to miss.

 

The days of uploading then distributing / pushing 'Combo Updates' etc are over. Think of this as a process that needs to be managed on each device that will likely involve the user, not as a package to be installed.


It really is a shame that Jamf can't produce solutions

Agree on Mass MDM Commands for OS updates, more failures than updates, so we also have to use SwiftDialog (much prefer this to nudge), Installomator, erase-install, Super and some great work from Dan Snelson with Set Up Your Mac which will replace DEPNotify soon, but way can't Jamf produce something that covers all these bases and have it as a supported option for a extra $1 or 2 per month per device.