Delay and Enforce OS Updates

Keep computers updated and set a delay for installation of updates to a specified number of days

• Delay macOS software updates
• Software Update Profile
• Create a Software Update profile
• Configure the Software Update Profile
• Restrictions Profile
• Block Beta & Standard Upgrades

Delay macOS software updates

To maintain a consistent software update schema across your organization you can defer software updates and choose when they will automatically be installed. There are two places you'll want to configure this; Blueprint Parameters and Restrictions profile from within your Library. 

Software Update Profile

Navigate to macOS Applications & Services and then Software Update. 

For macOS devices, you can use the Software Update Profile to manage downloading, installing, and deferring updates for macOS & App Store apps. This is a great way to make sure that, at minimum, security updates are being automatically installed on all of your computers. 

Create a Software Update profile

1. Navigate to the Library module.
2. Click Add New in the upper right-hand corner.
3. Select the Software Update Profile option. 

Configure the Software Update Profile

1. Give your software update profile a Name.
2. Select a Blueprint to deploy your Software Update profile. 
3. Select your desired settings for Automatic Updates.
   
   
4. Select Defer macOS updates by type for Defer macOS updates.
   • Select the desired deferrals for each macOS update type.
5. Click Save in the bottom right corner. 
   
   

Restrictions Profile

You can defer OS updates with the Restrictions profile in your Kandji Library. This option allows you to defer updates for a specified number of days. This can be especially helpful if you are managing Mac computers, iOS, iPadOS, and tvOS. The Restrictions profile allows you to choose whether any of the options set are applied to the specific platform you want to restrict. 

For Mac computers, Kandji recommends using a Software Update Library Item and deferring updates by specific types.

Block Beta & Standard Upgrades

The native options for blocking beta updates are also enabled using the Software Update profile in your Blueprints. With macOS Monterey 12.3 and later, a user can be offered a new software upgrade path to macOS Ventura without the need to run a larger full installer app or authenticate as an administrator. More information regarding this change can be found on Apple's Manage upgrading to macOS Ventura in your organization article.

Due to this change, the Application Blocking Parameter is unable to block these upgrades. The only circumstance when the Application Blocking Parameter will block the update is when it is downloaded from the Mac App Store.

Learn more about Restricting Access to Beta OS Releases.

The following examples are specific to macOS Sonoma, macOS Ventura, and macOS Monterey. For each release, you'll need to update each setting with the relevant info specific to that release. This will only block the installer if it is downloaded from the App Store and will not block the update in Software Update.