macOS Updates for University-Owned Macs

Every fall, Apple releases a new version of macOS.  As standard operation procedure, EUT will restrict access to the latest upgrade until it has been tested and all software has been updated to support it.  Within 60 days of release, EUT will vet the initial release and update packages such as print drivers and antivirus, we will then add an upgrade tool to the UMS Application Catalog for users to self upgrade.  EUT will then advertise it in January for all users to upgrade.
If a user absolutely needs to upgrade for application compatibility, their computer can be added the "UMSEnableMacOSUpgrade" group in JAMF.  The user must wait 1 hour for the system to check in, update inventory, and then have the user reboot to remove the restriction.

Detailed Information

Due to changes in modern macOS management, software updates cannot be reliably pushed to computers. In this case, End User Technology will push a notification to users to alert them when updates are available and allow them to defer or install immediately. Please be aware, users should upgrade the latest preferred version as soon as possible to avoid issues with software compatibility. This includes printing, office, remote tools, etc.

UMS Supported Versions:

Preferred: MacOS 13.x Ventura

Still being patched: MacOS 12.6.7 Monterey

MacOS 11.7.8 Big Sur. Support ends Fall 2023.

Must upgrade immediately: MacOS 10.15.7 and earlier.

 

What Updates are Applied

  • App store updates
    • No delay, will apply automatically when available.
  • Security updates
    • 7 day delay to allow for UMS:IT testing.
  • Minor operating system updates
    • 7 day delay to allow for UMS:IT testing.
  • Major operating system updates
    • 60 day delay to allow for EUT Testing and documentation.

How is the User Notified

When new software updates is available, JAMF will delay the updates for seven days so that UMS:IT can install and test them. Once tested, users will receive a notification from an app called "Nudge" that will alert the user updates ready and can be installed. Users will have a few deferral options with a counter or the option to apply immediately. 

Nudge

  • Application used for announcing software updates are available
    • Set target OS to let users know they are available
    • Prompt every 4 hours (240m) when not at target OS
    • Suppressed when no updates are available.
    • Defer for 4 hours, restart prompt
    • Number of times user can defer before it becomes aggressive and prompts every 15 minutes
  • Blocked from launching if app is running
    • Zoom.us
  • Camera usage = true
  • Attempt to download major updates after deadline
  • Asynchronous Software Updates = false
    • Nudge will wait for software update to finish downloading before showing the UI
  • Minimum version 12.6.7
    • Required install date to ensure compliance
    • 2022-11-18T18:00:00Z
    • All macOS 12 machines.
    • All machines that can run monterey and are not currently on 12.
    • Enforces updates to version of Monterey that will not detect Ventura as a minor update.

Deferral Process

  • App Store apps, Standard apps, available immediately for auto-update.
  • Security and Minor updates - 7 days.
  • Major operating system upgrades - 60 days.
  • Users will be given the opportunity to update when prompted or defer updates until a more convenient time. If they choose to defer the update, they will be prompted again 4 hours later.
  • If they choose to ignore the window, it will come back to the front facing window after 30 seconds until they make a selection.
  • Once a deferral limit has been reached or the deadline has expired, Nudge goes into aggressive mode and notifies the user every 15 seconds until updates are applied.

Environment

  • Managed macOS environment. All University-owned Apple devices.

 


When leaving feedback below, please leave your contact information if you would like a response.

Details

Article ID: 138881
Created
Tue 10/25/22 4:47 PM
Modified
Thu 7/13/23 10:32 AM
Applies To
Faculty
Staff