Posted on 02-01-2018 09:13 AM
Posted on 04-03-2018 08:14 AM
Bottom line on Jamf Pro 10.3
Posted on 02-01-2018 09:15 AM
Don't we already have the option in JAMF?
Discussion here: https://www.jamf.com/jamf-nation/feature-requests/6627/move-defer-software-updates-for-90-days-to-software-update-payload
Posted on 02-01-2018 12:11 PM
Even more interesting looks like there are about 20 or so more new Profile Keys for 10.13.4.... most with software update caching...
https://developer.apple.com/library/content/featuredarticles/iPhoneConfigurationProfileRef/Introduction/Introduction.html#//apple_ref/doc/uid/TP40010206-CH1-SW4
C
Posted on 02-21-2018 12:14 PM
Apple actually stated to us:
MacOS 10.13 provides support for deferred software updates.
Where did we see that deferring updates will only be 10.13.4 or later?
The article seems to show "defer" info for FileVault 2 and Content Caching Payload.
But yea, if we use Configuration Profile > Restrictions > Functionality > [x] Defer software updates for 90 days the other keys will be set or unset...so really should be a separate payload or key that we can set (digging around now).
Posted on 04-03-2018 08:14 AM
Bottom line on Jamf Pro 10.3
Posted on 10-13-2021 05:47 AM
Hi Rhio,
This means if apple releases software update today, then after 30 days the user will get update? or it will automatically update after 30 days?.
Posted on 10-15-2021 06:20 AM
@harsha wrote:Hi Rhio,
This means if apple releases software update today, then after 30 days the user will get update? or it will automatically update after 30 days?.
Its a deferral, meaning macOS won't be aware of the updates for N days.
Posted on 10-17-2021 09:43 PM
Hi Rhio,
May I know what is the use of it ?
Posted on 05-24-2018 07:02 AM
The iOS settings are in roughly the same place.
Posted on 09-17-2018 12:13 PM
First one I tested today sailed right on through to iOS12 despite the config profile being set to defer for 90 days.
Posted on 09-17-2018 01:14 PM
I actually need more than 90 days, which I've told to my Apple SE and others many many times. I work at a school, where we update our iOS once per year, in the summer. Period, end of story. Zero flexibility on this as the staff members that maintain iOS devices (myself) don't have time to dick around with iOS upgrades at any time other than the summer. Nor do I want a kindergartner to accidentally upgrade an iPad from iOS 10 to 11, or 11 to 12, etc.
I don't give a flying f-bomb if this makes my iOS devices "less secure". They are all heavily managed, supervised, and monitored. They do not leave our campuses. Why can't I have the option to manage my iOS devices on my own schedule. Why must we be beholden to some arbitrary upgrade schedule determined by Apple? Everyone talks about Apple becoming more friendly to Enterprise. Nonsense. They need to start listening to those of us in the trenches and not giving us half or partial solutions that don't actually work with our schedule.
Currently, I block the mesu.apple.com URLs at our firewall, but I'm not confident this will be a working solution forever.
Posted on 10-13-2021 05:53 AM
Hi damienbarrett,
May I know to forcely update the software update into users system, if the user is not installing the latest version? Is there any option like that if jamf pro? If yes, Can you tell me how to deploy or configure it in jamf pro?
Posted on 09-17-2018 01:34 PM
Rusty - are you scoped correctly with that config profile? Also, are the devices at least 11.3? If a device has an iOS version earlier than 11.3 then they will be able to update even if scoped correctly. Our 11.3+ devices are being deferred.
Posted on 09-18-2018 04:40 AM
Seeing the same on MacOS. Safari 12 just got deployed to 3000 macs at my organization. Okta integration is broken.
Config profile is definitely installed and scoped.
Ash
Posted on 01-03-2019 08:15 AM
But yea, if we use Configuration Profile > Restrictions > Functionality > [x] Defer software updates for 90 days the other keys will be set or unset...so really should be a separate payload or key that we can set (digging around now).
I have been looking into this as well and I haven't found a good way of independently managing the software update settings apart from our other Restrictions payload. Did you ever find anything from your digging?
Posted on 01-04-2019 12:19 AM
Posted on 07-30-2019 02:51 PM
Wait so this defers ALL updates, even say iTunes or what have you for 90 days? Even if you manually run a script or the Software Update payload?
Posted on 07-30-2019 09:25 PM
The behavior should be that each update is "invisible" from the day it's released until the number of days you've specified has passed. I don't believe the softwareupdate command will see these until then.
Posted on 10-02-2020 01:59 PM
I've applied a custom PLIST as described by @donmontalvo above and can't seem to get it to work. Creating a new profile with the Restrictions payload does work but I'd rather not duplicate settings and run into a possible conflict down the line.
Has anyone been able to get the custom PLIST setting to work? I do see the entries show up in /Library/Managed Preferences/com.apple.applicationaccess, but they just don't seem to do anything.
Verified by scoping the PLIST config profile to one machine on 10.14.6, the restrictions payload on another. PLIST machine showed the new supplemental update, the restrictions payload machine did not.
Another option is to unsign the restrictions configuration profile, strip out the parts I don't need, sign it and upload to Jamf. However, the last time I did this the signing certificate downloaded from Jamf expired after a year, resulting in my profile showing 'Unverified' which is less than ideal.
Thanks in advance,
Justin.
Posted on 10-05-2020 06:25 AM
Here is what we are doing that works just fine. One to scope the # of days to delay and the other to configure the behavior.