macOS Updates

BigSho
New Contributor II

Hi everybody,

We're curious as to how everybody manages macOS updates on their estate?

We don't currently manage this and are interested to see how everybody else handles this - let us know below.

Thanks!

8 REPLIES 8

Cayde-6
Valued Contributor

I am testing this method which gives the users ability to defer for 72 hours max before it installs automatically and reboots

https://github.com/homebysix/install-or-defer

stevewood
Honored Contributor II

We are using a deferral script similar to what @Cayde-6 mentioned. The one caution I would give is that if you are using a policy to trigger the dialogs, which is what we do, be certain to have a timeout in the jamfHelper dialog. Rather than use a LaunchDaeomon, which is the way the method above is done, we have a policy set to Once per Day frequency that runs the deferral script. Because that script runs as part of a policy, if the user simply slides the window out of the way, and the window has no timeout, the Mac has essentially stopped processing jamf actions until that dialog is gone. This can result in machines that appear to have lost communication when they actually haven't.

bassic
New Contributor III

Hi @stevewood would you be happy to share your script? We are still looking for a way to manage macOS updates... install or defer wasn't working for us.

Thanks in advance

RainerNRW
New Contributor

@stevewood me too

cubandave
Contributor

I use UeX which can do deferrals and more than just apple software updates.

It’s branded by default with your self service logo.

wiki

bpavlov
Honored Contributor

cubandave
Contributor

I like your idea of opening System Preferences. I’ve been using softwareupdate -I — all - R. That’s because we block the App Store. Which has no longer required to do updates 10.13+. I suppose it’s time that I make that available as an option. 😃

stevewood
Honored Contributor II

@bassic and @RainerNRW

Honestly, I would look at what @bpavlov posted. We adjusted our script to take advantage of the --restart option to take into account the need for the shutdown of T2 systems for BridgeOS updates. The script that @franton came up with for us is very similar to what Balmes came up with.

And if you want handle third party updates as well, look at @cubandave 's UEX and his JNUC session from 2018.