Revert Software Update Back to Apple

[krdell]

We have made a decision to no longer manage software updates and just have our clients go directly to Apple. What is the best way to revert the existing managed preference (which currently points to our Casper server) back to Apple? Thanks in advance!

[cbrewer]

sudo defaults delete /Library/Preferences/com.apple.SoftwareUpdate CatalogURL

[mm2270]

Another way using the jamf binary is:

sudo jamf removeSWUSettings

This removes the setting for the root account and the one in /Library/Preferences/

In addition to any of these commands, it would be a good idea to make sure you delete your SUS defined in the Servers section and also make sure any Network Segments don't have a default Software Update Server defined in them or the clients will just get pointed back to it.

[blackholemac]

That command posted by cbrewer will fix it on one client, BUT, note that Software Update can be defined in numerous places in Casper. Make sure you get them all and someone feel free to correct me if I'm missing any:

1. Don't know if you are using Network Segments in Casper but if you have any defined, make sure they are pointed at "No Software Update Server"

2. Make sure you have your internal Software Update server no longer specified in machine's Autorun data. I'll not specify how to do this the best way as I took a somewhat radical approach to this, but I'm certain it can be done better.

3. Target each of your clients with the above command posted by mm2270:

   sudo jamf removeSWUSettings

[krdell]

Something else I found that is even simpler is in the Mgmt tool to set that managed preference

Apply Setting To: Make This Preference Unmanaged

and clients then will go back to Apple. Thanks much for the assistance!!

[blackholemac]

Excellent...glad you got resolution...just make sure you check in the JSS in numerous places so a machine that is reimaged doesn't get reconfigured...and good catch on setting the MCX or profile to make it unmanaged...make sure you test, test, test on that one.

[Chris_Hafner]

Just to add to this, you can also create a policy to revert back to the Apple.com SUS pretty easily. Create a policy and go to the "Override Default Policy Settings" section at the bottom of the "General" tab during policy creation. You can set the default Software Update Server back to apple.com This makes it super simple, especially if you plan on using profiles.