The macOS Software Update Policy allows administrators to centrally manage and automate software updates across macOS devices. With Swif, you can define update behaviors, automate security updates, and defer updates according to your organizational needs.
Benefits of macOS Software Update Policy
Enhanced Security: Automatically install critical security patches and updates.
Consistent Updates: Ensure all managed devices receive uniform update experiences.
Reduced Downtime: Schedule and manage updates to minimize operational disruptions.
Creating a macOS Software Update Policy
To configure macOS software updates:
Log in to your Swif Console.
Navigate to Device Management > Policies.
Click Create Policy, and select macOS Software Update Policy.
Enter a descriptive Policy Name and an optional Description.
Customize the available settings based on your organization's update preferences:
Automatically Check for Updates: Enables automatic checking for available updates.
Download Newly Available Updates in Background: Downloads updates without interrupting the user.
Automatically Install macOS Updates: Installs downloaded macOS updates automatically.
Automatically Install App Store App Updates: Installs updates for apps from the App Store automatically.
Install XProtect, MRT, & Gatekeeper Updates Automatically: Keeps security components automatically updated.
Install Security Updates Automatically: Installs critical security updates without user intervention.
Allow Installation of macOS Beta Releases: Permits installation of beta software releases.
Restrict Software Update (Require Admin to Install): Restricts software update installations to admin users only.
Deferring macOS Updates
Swif allows you to defer macOS updates, helping to manage update rollouts carefully:
In the policy settings, select Defer macOS updates by type.
Enable Force update delay.
Set the number of days to delay updates for each update type:
Deferred Software Updates Delay: Delay general software updates. Users only see updates after the specified number of days post-release.
Deferred Minor Software Updates Delay: Delay minor OS updates specifically, ensuring minor updates appear to users only after the specified delay post-release.
Deferred Major Software Updates Delay: Delay major OS upgrades, making these updates visible only after the designated delay.
Defer non-OS Software Updates: Delays visibility of non-operating system software updates to users.
Each setting allows administrators to specify delays ranging from 1 to 90 days, providing sufficient time for internal testing and validation before rollout.
Coming Soon Features
Max User Deferrals
Soon, you'll be able to limit how often users can defer software updates using the Max User Deferrals feature. Once the set deferral limit is reached, the update installation will automatically proceed. This ensures timely updates while giving users flexibility.
Declarative Device Management for Software Updates (macOS 14+)
Swif will soon support a new advanced method of managing macOS updates using Declarative Device Management introduced in macOS 14 (Sonoma). This allows administrators to precisely schedule updates overnight to minimize user disruption.
Key Feature: "Update Tonight" using TargetLocalDateTime
TargetLocalDateTime: A timestamp (YYYY-MM-DDThh:mm:ss) specifying a precise update deadline. macOS notifies users about the pending update with an option to install immediately or select "Update Tonight" to schedule overnight installation.
Typically combined with TargetOSVersion and optionally TargetBuildVersion to define specific updates clearly.
Users see clear notifications (e.g., "Your organization will update your Mac to macOS 14.0 by 2:00 AM tomorrow"), offering seamless overnight installation choices, reducing daytime interruptions.
Deploying the macOS Software Update Policy
After configuring your policy:
Click Assign.
Select targeted devices or groups.
Save to apply the policy.
Swif will automatically apply the policy to selected devices.
FAQs
Can users manually override software updates?
By default, users can still manually check and install updates, unless restricted by the policy settings.
When are updates applied to devices?
Updates are typically applied based on the policy schedule and conditions, such as network availability and device activity.
Need Further Assistance?
Visit the Swif Help Center or contact Swif Support for additional assistance.
Last Updated: March, 2025