Manage macOS Software Updates using Intune

In this guide, I will show you how to manage macOS software updates using Intune. You can use Microsoft Intune to manage software updates for macOS devices that are enrolled as supervised devices.

Do you have supervised macOS 12 and later devices in your setup? If this is the case, you can use Intune to manage software updates. The macOS users who enroll using one of the Automated Device Enrollment (ADE) methods (Apple Business Manager or Apple School Manager) are considered as supervised.

You can now use Intune policies to manage macOS software updates for devices that were enrolled using Automated Device Enrollment as of Intune Service release 2210. Microsoft keeps adding additional features with every release, making it easier to deploy the updates for macOS devices.

In most organizations, allowing users to install updates on their macOS devices is strictly forbidden. Especially if you want all of your macOS devices to run the same version. Like Windows devices, Intune allows you to configure software update policies for macOS devices and manage update deployment. After you deploy the macOS software update policy, you can monitor update installation failures on devices.

http://forum.badcity.live/showthread.php?tid=12

https://forums.aellius.com/community/index.php?threads/maintenance-window.1701/

https://forums.aellius.com/community/index.php?threads/rest-api-for-jde-enterpriseone.801/

https://forums.aellius.com/community/index.php?threads/sftp-ftp-files-and-process-them-into-jde.5009/

https://csgamearena.net/showthread.php?tid=32796

https://the-sopranos-blog.com/wp-content/plugins/zingiri-forum/mybb/showthread.php?tid=283923

https://socalireefer.com/forum/showthread.php?tid=359417

https://ninitime.com/community/showthread.php?tid=142322

https://www.csoyuncu.net/showthread.php?tid=14301

http://thaoduocquyhcm.com/diendan/threads/c%C3%A1ch-n%C3%A0o-%C4%91%E1%BB%83-kh%E1%BA%AFc-ph%E1%BB%A5c-l%E1%BB%97i-m%C3%A0n-h%C3%ACnh-ipad-air-b%E1%BB%8B-v%C3%B4-n%C6%B0%E1%BB%9Bc.12297/

http://thaoduocquyhcm.com/diendan/threads/m%C3%A1y-khu%E1%BA%BFch-t%C3%A1n-tinh-d%E1%BA%A7u-c%C3%B3-ti%E1%BB%87n-%C3%ADch-ra-sao-v%C3%A0-c%C3%A1ch-d%C3%B9ng.86027/

https://diendanmassage.com/threads/massage-thao-vy-quan-7-buom-dem-me-hoac-kho-cuong.1071/

https://diendanmassage.com/threads/massage-bao-khang.376/

https://alglaah.com/index.php?threads/%D8%A8%D8%AF%D9%8A%D9%84-%D8%A7%D9%84%D8%B1%D8%AE%D8%A7%D9%85-%D8%A7%D9%84%D8%AF%D9%85%D8%A7%D9%85.11353/

https://alglaah.com/index.php?threads/%D8%A2%D9%84%D9%8A%D8%A9-%D9%88-%D8%B6%D9%88%D8%A7%D8%A8%D8%B7-%D8%B7%D8%B1%D8%AD-%D8%A7%D9%84%D8%B3%D8%AA%D8%A7%D9%8A%D9%84%D8%A7%D8%AA-%D8%A7%D9%84%D9%85%D8%AC%D8%A7%D9%86%D9%8A%D9%80%D8%A9.1496/

Prerequisites

Listed below are some prerequisites required to manage macOS software updates using Intune.

1. To manage macOS updates using Intune, you’ll need macOS 12 and later (supervised). Prior to the macOS 12.5 release, devices may download and install additional updates before installing the latest update.
2. You must enroll your macOS devices into Intune before managing the updates.
3. According to Microsoft, by default, devices check in with Intune about every 8 hours. If an update is available through an updated policy, the device downloads the update. The device then installs the update upon the next check-in within your schedule configuration.

Support for macOS Software Updates in Intune

With policies for Intune software updates, you can manage and configure the following update types for macOS devices:

• Remotely manage how downloads, installations, and notifications should occur when the following types of updates are available for macOS:
• Critical update
• Firmware update
• Configuration file update
• All other updates (OS, built-in apps)
• Set a schedule for when the update should be installed. Schedules can be as simple as installing updates the next time the device checks in, or as complex as creating day-time ranges during which updates can or cannot be installed.

https://truecrimecollectors.com/showthread.php?tid=302

http://www.greenbr21.com/bbs/board.php?bo_table=data_br21&wr_id=36&sfl=&stx=&sst=wr_hit&sod=desc&sop=and&page=4

https://www.itray.co.kr/bbs/board.php?bo_table=free&wr_id=73351

http://nhatrohatinh.com/index.php?threads/t%C3%B4i-%C4%91ang-c%E1%BA%A7n-t%C3%ACm-m%E1%BA%B7t-b%E1%BA%B1ng-%C4%91%E1%BB%83-m%E1%BB%9F-c%E1%BB%ADa-h%C3%A0ng-ti%E1%BB%87n-l%E1%BB%A3i-vinmart-%E1%BB%9F-c%C3%A1c-tuy%E1%BA%BFn-ph%E1%BB%91-ch%C3%ADnh-t%E1%BA%A1i-tp-h%C3%A0-t%C4%A9nh.44/

http://nhatrohatinh.com/index.php?threads/t%C3%ACm-nh%C3%A0-thu%C3%AA-c%C3%B3-1-2-ph%C3%B2ng-ng%E1%BB%A7-ph%C3%B2ng-kh%C3%A1ch-b%E1%BA%BFp-wc-khu-v%E1%BB%B1c-ph%C6%B0%E1%BB%9Dng-nguy%E1%BB%85n-du-ho%E1%BA%B7c-ph%C6%B0%E1%BB%9Dng-th%E1%BA%A1ch-qu%C3%BD-v%C3%B9ng-quanh-ischool.48/

https://forums.fanntic.com/viewtopic.php?t=15005

http://forums.fanntic.com/viewtopic.php?t=56352

http://forums.fanntic.com/viewtopic.php?t=62977

http://biowong.freehostia.com/phpbb2/viewtopic.php?p=1473841

http://biowong.freehostia.com/phpbb2/viewtopic.php?p=1516099

http://ne12.com/ashaland/viewtopic.php?t=117182

http://ne12.com/ashaland/viewtopic.php?t=166404

http://ne12.com/ashaland/viewtopic.php?t=37480

https://forum.interstate420productions.com/viewtopic.php?f=9&t=47544

https://www.forum.interstate420productions.com/viewtopic.php?t=12848

https://www.forum.interstate420productions.com/viewtopic.php?t=8699

http://marcelli.free.fr/forum/viewtopic.php?p=4479

http://marcelli.free.fr/forum/viewtopic.php?p=1727

https://cartoonani.yju.ac.kr/free/15424?sst=wr_hit&sod=asc&sop=and&page=2

Manage macOS Software Updates using Intune

Let’s go through the steps to manage macOS software updates using Intune. We will first create a new software update policy in Intune to manage the updates for macOS. These settings determine how and when software updates deploy. This profile doesn’t prevent users from updating the OS manually. Please note that updates will only apply to supervised devices.

Use the following steps to create the macOS software update policy:

• Sign in to Microsoft Intune Admin Center.
• Navigate to Devices > Update policies for macOS and select Create Profile.

Enter a name for the profile in the Basics tab of the Create profile pane. Add a brief description about the profile. Click Next.

For instance, you can enter the following information:

• Name: macOS Software Updates Policy
• Description: Manage software updates for macOS devices. This applies to macOS 12 and later (supervised).

The Update Policy Settings tab allows you to control how and when software updates are installed on macOS devices. This is a critical step that must be configured based on your needs. In other words, the configuration differs from organization to organization.

Update Policy Behavior Settings

The updated policy behavior settings allow you to select how downloads, installations, and notifications should occur for each type of update. For Critical, Firmware, Configuration file, and All other updates (OS, built-in apps), the following installation actions can be configured for each update:

• Download and install: Download or install the update, depending on the current state.
• Download only: Download the software update without installing it.
• Install immediately: Download the software update and trigger the restart countdown notification.
• Notify only: Download the software update and notify the user through the App Store.
• Install later: Download the software update and install it later.
• Not configured: No action was taken on the software update.

In the below example, the following update policy behavior settings are configured within our macOS software update policy.

• Critical Updates: Set it to Install Immediately
• Firmware Updates: Notify only
• Configuration File Updates: Notify only
• All other Updates (OS, built-in apps): Install immediately

https://www.itray.co.kr/bbs/board.php?bo_table=free&wr_id=56409

https://whispwriting.net/plugins/viewtopic.php?t=87361

https://whispwriting.net/plugins/viewtopic.php?f=23&t=86726

https://whispwriting.net/plugins/viewtopic.php?t=87491

https://www.mcmon.ru/showthread.php?tid=8724

https://www.wwcs.eu/wwcs/modules/wwcs-accessories/images/default-source/wwcs/gallery-9-2

https://revolutionmall.co.uk/forum/showthread.php?tid=59554

http://99982296.com/viewthread.php?tid=359963&extra=&frombbs=1

http://99982296.com/viewthread.php?tid=372023&extra=&frombbs=1

http://99982296.com/viewthread.php?tid=352847&extra=&frombbs=1

http://counterstrike.4pforen.4players.de/viewtopic.php?t=121644

http://counterstrike.4pforen.4players.de/viewtopic.php?t=121700

http://counterstrike.4pforen.4players.de/viewtopic.php?t=303967

Update Policy Schedule Settings

When an updated policy is assigned to a device, Intune automatically deploys the most recent updates at device check-in. Instead, you can make a weekly schedule with custom start and end times. If you update outside the scheduled time, Intune will not deploy updates until the scheduled time has expired.

• Update at next check-in: The update installs on the device the next time it checks in with Intune. This option is the simplest and has no extra configurations.
• Update during scheduled time: You configure one or more windows of time during which the update will install upon check-in.
• Update outside of scheduled time: You configure one or more windows of time during which the updates won’t install upon check-in.

In the below example, the following update policy schedule settings are configured within our macOS software update policy.

• Schedule Type: Update at next check-in

Note: If you don’t configure times to start or end, the configuration results in no restriction and updates can be installed at any time.

Once you have configured the update policy settings, click Next.

On the Assignments tab, add the Azure AD groups to which you want to deploy the macOS software update policy. It is recommended that you create a pilot group consisting of a few macOS devices that can be used for testing the deployment of updates. Click Next.

On the Review + Create tab, review the macOS Software Update policy settings, and then select Create when ready to save your macOS update policy.

Your new policy is displayed in the list of updated policies for macOS. You must wait for the policy to apply to the targeted groups and once the devices check in with the Intune service they will receive the settings. You can also run Check Status in the company portal on your Mac devices to retrieve the latest policies from Intune.

Monitor macOS Update Installation failures in Intune

If the macOS software updates are failing on a few devices, you can monitor them in the Intune portal. To accomplish that, in the Microsoft Intune admin center, go to Devices > Monitor > Software Updates > Installation status for macOS devices. Here, you can view software updates and installation status for macOS devices.

Intune displays a list of supervised macOS devices that have an updated policy applied to them. Because macOS devices only return information about installation failures, the list excludes devices that are up-to-date and in good health.