Keep computers updated and set a delay for installation of updates to a specified number of days
- Delay macOS software updates
- Software Update Library Item
- Create a Software Update Library Item
- Configure the Software Update Library Item
- Restrictions Library Item
- Block Beta & Standard Upgrades
Delay macOS software updates
To maintain a consistent software update schema across your organization you can defer software updates and choose when they will automatically be installed. There are two places you'll want to configure this; Software Update profile and Restrictions profile from within your Library.
Software Update Library Item
You can use the Software Update Library Item for Mac computers to manage downloading, installing, and deferring updates for macOS & App Store apps. This is a great way to make sure that, at minimum, security updates are being automatically installed on all of your computers.
Create a Software Update Library Item
- Navigate to the Library module.
- Click Add New in the upper right-hand corner.
- Select the Software Update Profile option.
Configure the Software Update Library Item
- Give your software update profile a Name.
- Assign to your desired Assignment Maps or Classic Blueprints.
- Select your desired settings for Automatic Updates.
- Select Defer macOS updates by typefor Defer macOS updates.
- Select the desired deferrals for each macOS update type.
- Click Save in the bottom right corner.
Restrictions Library Item
You can defer OS updates with the Restrictions profile in your Kandji Library. This option allows you to defer updates for a specified number of days. This can be especially helpful if you are managing Mac computers, iOS, iPadOS, and tvOS. The Restrictions profile allows you to choose whether any of the options set are applied to the specific platform you want to restrict.
For Mac computers, Kandji recommends using a Software Update Library Item and deferring updates by specific types.
Block Beta & Standard Upgrades
The native options for blocking beta updates are also enabled using the Software Update profile in your Blueprints. With macOS Monterey 12.3 and later, a user can be offered a new software upgrade path to macOS Ventura without running a larger full installer app or authenticate as an administrator.
Due to this change, the Application Blocking Parameter cannot block these upgrades. The only circumstance when the Application Blocking Parameter will block the update is when it is downloaded from the Mac App Store. Learn more about Restricting Access to Beta OS Releases.
The following examples are specific to macOS Sonoma, macOS Ventura, and macOS Monterey. For each release, you'll need to update each setting with the relevant info specific to that release. This will only block the installer if it is downloaded from the App Store and will not block the update in Software Update.
Sequoia - Public Release
- Process name: Install macOS Sequoia
- Match Type: Contains
- Path: /Applications/Install macOS Sequoia.app
- Match Type: Contains
- Bundle ID: com.apple.InstallAssistant.macOSSequoia
- Match Type: Exact
Sonoma - Public Release
- Process name: Install macOS Sonoma
- Match Type: Contains
- Path: /Applications/Install macOS Sonoma.app
- Match Type: Contains
- Bundle ID: com.apple.InstallAssistant.macOSSonoma
- Match Type: Exact
Ventura - Public Release
- Process name: Install macOS Ventura
- Match Type: Contains
- Path: /Applications/Install macOS Ventura.app
- Match Type: Contains
- Bundle ID: com.apple.InstallAssistant.macOSVentura
- Match Type: Exact
Monterey - Public Release
- Process name: Install macOS Monterey
- Match Type: Contains
- Path: /Applications/Install macOS Monterey.app
- Match Type: Contains
- Bundle ID: com.apple.InstallAssistant.macOSMonterey
- Match Type: Exact