msupdate hanging when pushed from Jamf remote or from a policy

[goffja2000]

Hi,

I noticed that some of my Microsoft Defender clients weren't updating on their own. I attempted to run the following from Jamf Remote as well as a policy from Jamf and it just hangs on the devices. 

/Library/Application\ Support/Microsoft/MAU2.0/Microsoft\ AutoUpdate.app/Contents/MacOS/./msupdate --list

/Library/Application\ Support/Microsoft/MAU2.0/Microsoft\ AutoUpdate.app/Contents/MacOS/./msupdate --install

I am able to remote in to one of the devices and run the commands manually and they do work. I have to run --list on the machine first or it doesn't see any updates as being availalble.

Does anyone have any tips to get msupdate to work from Jamf?

[sdagley · Accepted solution]

@goffja2000 the msupdate tool isn't intended to be run from root, which is what happens when you call it from Jamf Remote or a policy. You'd need to create a script to run msupdate as the logged in user, and a good example of how to do that is https://scriptingosx.com/2020/08/running-a-command-as-another-user/ 

[goffja2000]

Thanks, 

[scottb]

@goffja2000 - doesn't Defender setup in Jamf put in MAU update process?  Mine are updating using only the Defender setup/Profiles...