Delay and Enforce OS Updates

By David Marks

Keep computers updated and set a delay for installation of updates to a specified number of days.

Delay macOS software updates

To maintain a consistent software update schema across your organization you can defer software updates and choose when they will automatically be installed. There are two places you'll want to configure this; Blueprint Parameters and Restrictions profile from within your Library. 

Software Update Profile

Navigate to macOS Applications & Services and then Software Update. 

For macOS devices, you can use the Software Update Profile to manage downloading, installing, and deferring updates for macOS & App Store apps. This is a great way to make sure that, at minimum, security updates are being automatically installed on all of your computers. 

Create a Software Update profile

  1. Navigate to the Library module.
  2. Click Add New in the upper right-hand corner.
  3. Select the Software Update Profile option. 

Configure the Software Update Profile

  1. Give your software update profile a Name.
  2. Select a Blueprint to deploy your Software Update profile. 
  3. Select your desired settings for Automatic Updates.
  4. Select your desired settings for Update Settings.
  5. Click Save in the bottom right corner. 

Restrictions Profile

You can defer OS updates with the Restrictions profile in your Kandji Library. This option allows you to defer updates for a specified number of days. This can be especially helpful if you are managing Mac computers, iOS, iPadOS, and tvOS. The Restrictions profile allows you to choose whether any of the options set are applied to the specific platform you want to restrict. 

Block Beta & Standard Upgrades

The native options for blocking beta updates are also enabled using the Software Update profile in your Blueprints and utilizing Kandji's Application Blocking Parameter. Learn more about Restricting access to beta OS releases.

The following examples are specific to macOS Monterey and macOS Big Sur. For each release, you'll need to update each setting with the relevant info specific to that release.

Monterey - Public Release

  • Process nameInstall macOS Monterey
    • Match Type: Contains 
  • Path:/Applications/Install macOS Monterey.app
    • Match Type: Contains 
  • Bundle ID:com.apple.InstallAssistant.macOSMonterey
    • Match Type: Exact 

Big Sur - Public Release

  • Process nameInstall macOS Big Sur
    • Match Type: Contains 
  • Path:/Applications/Install macOS Big Sur.app
    • Match Type: Contains 
  • Bundle ID:com.apple.InstallAssistant.macOSBigSur
    • Match Type: Exact