Skip to main content

Hello there, first time Poster here. I'm pretty new to the Administration of MacOS environments. 
My Company just started working with JamF, and I'm trying to figure out how to best handle OS Updates for the Users.

I mainly found out about the options to use Nudge in combination with erase-install to have nice notifications and a solid way to force updates, or use SUPERMAN which seem to be able to do both, notifications and forcing updates. I have already tried around with Nudge for a bit and think its pretty cool. 

Im hoping someone can explain in a bit more detail what SUPERMAN does differently/better or worse than Nudge+erase-install and why they are using either of the solutions or even if they have a totally different approach!

 

Or, and hear me out because it seems to be something that everyone overlooks, but why not use the built in update mechanisms? Be it DDU or just MDM commands for updates...it works well and there’s no additional necessary items or configurations, or anything that’s necessary.

What ​@Chubs said. Unless your environment has pre-macOS Sonoma systems (since you mention a corporate environment you’ll really want to be at no more than N-2 for macOS versions, and preferably at N if possible) your first choice should be the Declarative Device Management Scheduled Updates mechanism Apple introduced with macOS Sonoma. It’s not perfect, but it is the only Apple supported way and it has improved significantly since it was first introduced.

We used Nudge, but for the last year or so we are using build in update mechanism and having no issues so far. Give it a try 

I agree with the above posts. However, I will add one extra thought. We’ve moved to using DDM for updates via the new BluePrint feature, but at my campus we also have SUPERMAN running alongside so we can have more granular control over “when” update notifications happen (i.e. after 3pm for our students). I also prefer the deferral flexibility with these combined, though I am sure we will likely move away form SUPERMAN all together at some point in the future. It’s always best to use standard built in features when possible. 

Terms & ConditionsCookie settingsAccessibility statement