Create policy to check for and run macOS updates using Self Service ????

[tcandela]

Just a quck question. Does anyone have a Self Service policy that checks for and installs updates if any available?

for a blend of macOS 10.13 -- 10.14 -- 10.15 in the environment

maybe a line in the 'files and processes' that says

softwareupdate -ai --restart
or
softwareupdate -aiR

[sdagley]

Calling softwareupdate directly to install updates, especially ones involving a restart, has become much less reliable, so much so that Munki 5 has dropped support for forced installs and directs users to the Software Update panel in System Preferences. Check out the #catalina channel in the MacAdmins Slack for a recent discussion on the topic (at least I think that was the channel)

[tcandela]

@sdagley currently i use a logout policy that if a mac has an macOS update pending it installs on logout using the 'software updates' payload using each computers default update server with a message that appears informing the user that an update is installing.

sometimes i have a mac that logs out and the update is running but it taking forever. I don't know if its an issue with the download of the update(s), the users network, or what, so i have them force a restart.

was just curious.

[davidi4]

@tcandela Can you post your policy? Is this based on a Smart Group for Scope? If so, could you post that as well?

[sgiesbrecht]

@tcandela can you please post your policy. Thx