macOS Updates

[BigSho]

Hi everybody,

We're curious as to how everybody manages macOS updates on their estate?

We don't currently manage this and are interested to see how everybody else handles this - let us know below.

Thanks!

[Cayde-6]

I am testing this method which gives the users ability to defer for 72 hours max before it installs automatically and reboots

https://github.com/homebysix/install-or-defer

[stevewood]

We are using a deferral script similar to what @Cayde-6 mentioned. The one caution I would give is that if you are using a policy to trigger the dialogs, which is what we do, be certain to have a timeout in the jamfHelper dialog. Rather than use a LaunchDaeomon, which is the way the method above is done, we have a policy set to Once per Day frequency that runs the deferral script. Because that script runs as part of a policy, if the user simply slides the window out of the way, and the window has no timeout, the Mac has essentially stopped processing jamf actions until that dialog is gone. This can result in machines that appear to have lost communication when they actually haven't.

[bassic]

Hi @stevewood would you be happy to share your script? We are still looking for a way to manage macOS updates... install or defer wasn't working for us.

Thanks in advance

[RainerNRW]

@stevewood me too

[cubandave]

I use UeX which can do deferrals and more than just apple software updates.

It’s branded by default with your self service logo.

wiki

[bpavlov]

https://babodee.wordpress.com/2019/07/23/handling-macos-software-updates-with-jamf-pro/

[cubandave]

I like your idea of opening System Preferences. I’ve been using softwareupdate -I — all - R. That’s because we block the App Store. Which has no longer required to do updates 10.13+. I suppose it’s time that I make that available as an option. 😃

[stevewood]

@bassic and @RainerNRW

Honestly, I would look at what @bpavlov posted. We adjusted our script to take advantage of the --restart option to take into account the need for the shutdown of T2 systems for BridgeOS updates. The script that @franton came up with for us is very similar to what Balmes came up with.

And if you want handle third party updates as well, look at @cubandave 's UEX and his JNUC session from 2018.