iOS: Scheduled DDM Update forces device to update immediately

[mvu]

Wondering if anyone is experiencing this lately...

When we schedule a DDM update, the device successfully gets the command from Jamf Pro. The device downloads the update, but it immediately installs the update without honoring the scheduled plan. 

There isn't a notification, maybe a 5-second ticker, then the device shuts off and updates.

Some other details:

• Happens to some devices, not all

• I set the deadline a few days out

• Noticed this around iOS 18.1 - 18.2.1

• Here is a log from sysdisagnose:

[DDM] -[SUDDMManager _scanForUpdateForDeclaration:retryIfNecessary:]: Scanning for update for DDM declaration SUCoreDDMDeclaration (DeclarationKey:com.apple.RemoteManagement.SoftwareUpdateExtension/EAD2FADB-1141-44C4-8E49-6E07F462A033:NmQ1ZjVjYTItMzViNS00ZDcxLThkMWQtNGMxZmY3YmJlODYx.NjZmYTA2YzYyZGJjNjFmNzM0OGE1ZGY1YTNhMGU3ODg4ZWQwMjRjNDg5NTcwZDZmZDM4YWQ2M2VjNjc3ZWVkYQ==|EnforcedInstallDate:2025-01-08T22:00:00|VersionString:18.2.1|BuildVersionString:22C161|DetailsURL:(null)|companyName:(null)|NotificationsEnabled:YES)

[mvu]

Also, here's the other part in sysdiagnose log that downloads and installs right away:

Scan found preferred descriptor {iOS 18.2.1} and alternate descriptor {(null)} with error (null) for scan options ClientName: com.apple.SoftwareUpdateServices.DDM Identifier: com.apple.SoftwareUpdateServices.DDM Forced: YES ScanType: 2 Types: Requested PMV: 18.2.1 Requested Build: 22C161 SessionID: 7091B1D1-49EE-4010-8404-3AB2ABA421DE MDM use delay: NO MDM show RSR: YES =============== MDM: RequestedProductMarketingVersion: 18.2.1 RequestedBuildVersion: 22C161 UseDelayPeriod: NO DelayPeriodSeconds: 0 MDMSoftwareUpdatePath: SUMDMSoftwareUpdatePathDefault AllowSplat: YES =================== Ignore NoUpdateFound response: NO

[deejay]

We're seeing the same behaviour, sort of.  I've only just been made aware so still early in investigations.  Issue seems to only present on devices which have auto-updates enabled (download, RSR & iOS all = true).  Auto-update should wait until the evening (timezone is correctly configured - UK), however several devices in our org seem to have just updated immediately.
Anecdotally, devices configured to 'download-only' have not yet updated (DDM update is scheduled for next week).

[deejay]

After the next inventory, affected device shows that the DDM plan completed "successfully", shows the time that the update was actually applied but the plan details correctly state that this should have been enforced next week.

[deejay]

One of the other affected users did report this same behaviour happening with the 18.2 update as well but we're not aware of any reports for an iOS 17.x updates.

[mvu]

I heard back from Apple on this. Case number below.

They reached out and working with Jamf on this. My Jamf person confirmed Apple reach out and they are working together on this. As far as I understand and know, this is on Apple's side of house.

We had test devices see the same thing with the 18.3 update.

Case Number: 102507265855 (AppleCare Enterprise)