Configuring Managed OS for macOS

By Katelyn Husvar

Learn how to configure Managed OS for macOS for your fleet.

Enabling Managed OS for macOS in your Library

Deploying and enforcing an OS version is as easy as adding an OS to your library and assigning it to a Blueprint. Follow the steps below.

  1. Navigate to Library in the left-hand navigation bar.
  2. Select Add New in the upper right-hand corner.
  3. Scroll down to the Operating Systems section and select your desired OS.
Kandji supports adding the same Managed OS to your Library multiple times. This is useful when it's desired to configure differing settings for different Blueprints. For example, you can make a Managed OS automatically upgrade devices in one Blueprint while having it be available in Self Service in another. Labels are used to differentiate multiple copies of the same Managed OS. See below for additional information.

Configuring Managed OS for macOS

  1. Enter a Label to help differentiate this instance of Managed OS for macOS from others in your Library. These labels are not visible to end-users, but are displayed throughout the Kandji admin interface.
  2. Assign the Managed OS to a Blueprint.
  3. Configure how upgrade installations of this major version of macOS should be enforced. Continuously Enforce will automatically initiate an upgrade on older versions of macOS, or users can upgrade on their own if you choose Install on-demand from Self Service. This is an option that can easily be differentiated between Blueprints by making additional copies of the same Managed OS for macOS. (Be sure to add unique and descriptive labels to help you identify them.)
  4. On the configuration page, select an option for Version Enforcement.

    Available options include the following. Note: Both options B and C simply set a minimum OS version, or "floor", for which to compare the device's OS version to determine if it should update.

    1. Do Not Manage: This option will not manage OS updates.
    2. Automatically Enforce New Updates: This option will allow you to pick a default time frame in which new updates will be enforced, meaning they will be used as the "floor", and will be calculated automatically by Kandji based on the date Apple released the update. When updating, Kandji always installs the latest available version of macOS that is approved by Kandji (which is displayed in the upper-right hand corner of the Library Item).
    3. Manually Enforce Minimum Version: This option allows you to manually specify the minimum version (the "floor") that devices must be running, as well as the date by which users must update. When updating, Kandji always installs the latest available version of macOS that is approved by Kandji (which is displayed in the upper-right hand corner of the Library Item). If a device is already running an OS version greater than the minimum that you specify, no updates will be enforced. We recommend choosing this option if it's the first time you're managing OS updates for your Mac devices.
  5. Select an Enforcement Deadline. This is the date by which the minimum macOS version must be met or else an update will be enforced. Updates will cache in advance of enforcement and your users will begin to be prompted to update 5 days prior to the enforcement deadline. They'll then be notified each day leading up to enforcement.
  6. Select an Enforcement Time Zone to determine when to enforce the update. 
  7. Select an Enforcement Time, which will be the exact time of day that the update is enforced; the enforcement will be determined server-side based on the previously selected Enforcement Time Zone
  8. Click Save.
If this is the first time you are enforcing an OS version on your fleet, we recommend using the Manually Enforce Minimum Version option and setting the enforcement deadline to at least 5 days later. Otherwise, if you select the Automatically Enforce New Updates option and set it to 2 weeks (as an example), and Apple hasn’t released an update in the last two weeks, all of your devices will immediately require users to update and restart.
To learn more about Managed OS for macOS, please see our other support articles:
Managed OS for macOS Compatibility and Installation Mechanisms
User Experience with Managed OS for macOS