Understanding Managed OS & Auto App Settings

Auto Apps and Managed OS have advanced enforcement options available to system administrators. 

Version Enforcement provides administrators the ability to enforce Auto App updates.

Version Enforcement options are as follows:

Don't enforce updates 

Kandji will install the Auto App once per device and will not prompt or enforce updates to end-users. 



Do not manage updates 

In the case of Managed OS, Kandji will not enforce an OS version when Do not manage updates is selected.

Kandji-Support-KB-managedosdonotmanage@2x

Automatically enforce new updates

This option will automatically enforce new updates using your specified enforcement date. End users will begin receiving a prompt via the Kandji Menu bar icon 5 days prior to the enforcement deadline. 

  1. The first option is the Enforcement Timeframe. This option allows you to specify the amount of time after an update is released that it should be automatically enforced. The available options include:
    • 2 Weeks
    • 3 Weeks
    • 1 Month
    • 2 Months
    • 3 Months
  2. The second option is the Enforcement Time Zone. This time zone will be used to determine when to enforce the update. 
  3. The third option is the Enforcement Time. This will be the time of day that the update is enforced. Enforcement will be determined server-side, based on the previously selected Enforcement Time Zone

    Example: An admin sets the enforcement time to October 1, 2020, at 5:00 pm PST,  a Mac in NYC will update on October 1, 2020, at 8:00 pm local time. 
  4. This infobox shows you the currently enforced version of the Auto App or Operating System, If you are enforcing an older version currently, you will see additional infoboxes for the newer version(s) and when they will be enforced.


              Kandji-Support-KB-autoappsettingstimeframe@2x

Manually Enforce new updates

This option allows Kandji admins to manually specify a minimum version and a deadline for that version. The enforcement date dropdown can be set to any date. This option can be useful for immediately enforcing critical security updates. 

  1. The first option is the Minimum Version selection, you will need to select the minimum version of the application to enforce. Note that if an app does not meet this requirement it will get the latest available version of the app installed.
  2. The second option is the Enforcement Deadline this the day by the minimum version must be met or the update will be enforced. 
  3. The third option is the Enforcement Time Zone this time zone will be used to determine when to enforce the update. 
  4. The fourth option is the Enforcement Time this will be the exact time of day that the update is enforced, the enforcement will be determined server-side based on the previously selected Enforcement Time Zone

    Example: An admin sets the enforcement time to October 1, 2020, at 5:00 pm PST,  a Mac in NYC will update on October 1, 2020, at 8:00 pm local time. 
    Kandji-Support-KB-autoappssettings2@2x

Optional: Add to Dock during install

This option will add the app to the right-hand side of every existing user's Dock during installation. 

If the app is already installed during Kandji's first attempt at installing, the icon will not be added to the dock. The app will be added to the Dock upon the next update that installs via Kandji. The icon will also be added if a user removes the app, and Kandji re-installs it.  

For more information on Auto Apps, you can read our Auto Apps Overview.

For more information on Managed OS, you can read our Managed OS Overview