I haven't used the Software Updates feature before. In the past, I have tried performing a mass action using a static group for testing. Yesterday, I decided to do that for some of my hot spares on the bench to take them from 14.5 to 14.6 and discovered that we had enabled the Software Updates feature. This understandably removed that ability from an action, so I figured I would give it a try with an eye towards deferrals as the "killer app" of the process.
We control updates on our active machines with some restrictions payload and restricted software, but the spares are a little more relaxed. The only thing they get is our software update payload, which is set to make sure updates are automatic and enabled:
So I decided to take two of them, put them in a static group and run the following:
This ran very much like previous experiences with the MDM action. Devices eventually handled the commands and downloading/staging commenced. I set one machine aside with the 'REBOOT(8)' man page open in a terminal window to prevent most restart methods from being successful. The other machine I sat and watched to confirm the softwareupdate/nsurl stuff. Watching logs, seeing snapshots in Disk Utility. All going to plan, but I never got the notification/deferral messages. Instead, the red number one appeared on the System Settings icon in the dock and that was it. There may be some notification voodoo here, but I am using the defaults and have received popups from softwareupdate in the past when the updates are automatically checked.
Completing the update on the watch machine worked great. I forced an inventory update just to see the OS correctly in Jamf. Here are the MDM commands in the period for the watched computer:
But now this is pending:
Things are the same on the set aside machine, which is still sitting at 14.5 with the red number one and no notifications. It has this history:
Still the same command pending. I'll eventually give up on the notifications and complete the update via System Settings UI. The questions I have are why are there no notifications for deferral when I specified that, and do I just need to cancel the pending MDM command or otherwise ignore it?
1 ACCEPTED SOLUTION
from what I recall, deferred update still uses the old MDM method, which was kinda useless.
Use the scheduled update, this will prompt and force the update by the due date.
Check /var/db/softwareupdate for the SoftwareUpdateDDMStatePersistace.plist
there should be additional data in the devices record now on JAMF
from what I recall, deferred update still uses the old MDM method, which was kinda useless.
Use the scheduled update, this will prompt and force the update by the due date.
Check /var/db/softwareupdate for the SoftwareUpdateDDMStatePersistace.plist
there should be additional data in the devices record now on JAMF
I ran another one:
Old MDM commands aren't sent like before. Instead only DeclarativeManagement is in the history. The Management tab looks encouragingly different:
The client notification appeared with the scheduled time and the options of Install or Try Tonight. I took some shots and then ignored it. The notification did disappear and isn't in the slideout history when you click the clock. It seems to have been replaced by the good old red number one, so thanks for the tips all. I also see the .plist file, which is pretty cool. Going to mark the issue solved, since scheduling seems to be the trick here.
Thanks for the tip. I wondered if I was just holding it wrong by picking deferral, especially when it seemed to be much like to old MDM method. The OSUpdateStatus - Scheduled MDM commands are still pending. I didn't find anything in the operating system history under the history tab, but the operating system under the management tab looks like this on both the completed 14.6 and 14.5 computers:
I'll try the scheduled next time and see how that goes. For now I guess I will just cancel the pending MDM commands and see if they come back.
I've been trying this out recently on a couple of test machines and have noticed erratic results. For instance, user keeps getting notifications that an update is available.
If I go to Settings > General > Software Updates, it shows that OS is up-to date.
These are the settings I configured in Jamf Pro for the test group to trigger updates.
...and the operating system update menu for the Mac in question.
Having a hard time understanding why we are getting these alerts.
