This control makes macOS devices download and install app and system updates in the background. Use it to keep Macs up to date without relying on each employee to do it.
Overview
Supported platforms:
| macOS | Windows | Linux | iOS / iPadOS | Android |
|---|---|---|---|---|
| ✅ |
Factorial IT sends an MDM configuration payload that governs how macOS Software Update behaves. Any toggle you turn on takes priority over the employee's own Software Update settings, and the employee cannot switch it off.
How to use
- Go to MDM > Controls > Add new control and choose Automatic app and OS updates.
- Turn on the update behaviours you want to enforce:
- Download newly available updates in the background
- Automatically install macOS updates
- Automatically install App Store app updates
- Automatically install security updates
- Pick the devices it applies to: every macOS device, specific device groups, or a custom target.
Edit or turn off the control
Open the control from MDM > Controls to change it or disable it. Disabling it ends enforcement, but settings already applied stay on the devices.
Tips and Best Practices
- Start with security updates. They carry the most risk when skipped and rarely disrupt work.
- Test on a small device group first. Roll the control out to a pilot group, then widen the target.
- Tell employees before you enforce it. Once a toggle is on, they lose the option to change it locally, so let them know why.
Troubleshooting and FAQ
Troubleshooting
- An employee changed their update settings back. Only the toggles you turned on are enforced. Behaviours left off stay under the employee's control.
- Devices kept the settings after I disabled the control. This is expected. Disabling stops enforcement but does not clear the configuration already on the device.
- The control does not appear for a Windows or Linux device. It only supports macOS.
FAQ
-
Can employees override the settings?
No. Toggles you turn on override their local Software Update preferences.
-
Which devices can I target?
All macOS devices, specific device groups, or a custom target.
-
What happens when I disable the control?
Factorial IT stops enforcing it. Configurations already applied are not removed from the devices.