Create a Mac Software Update Preferences Policy

The Software Update Preferences Policy controls how and when automatic software updates are installed on user macOS devices for App Store updates, macOS version updates, critical updates, and pre-releases. Automating software updates can ensure that your users are in compliance and running the latest versions. This policy does not control major macOS upgrades.

This policy determines the software update preferences and how updates  are downloaded and installed on user devices. These settings are separate from the JumpCloud Patch policies, and settings selected as part of this policy are related but separate. If you don’t want users to control how software is updated on their devices, you should deselect the fields below. The policy works on all devices running JumpCloud-supported macOS versions that are enrolled in Mobile Device Management (MDM). 

To create a macOS Software Update Preferences Policy:

1. Log in to the JumpCloud Admin Portal: https://console.jumpcloud.com/login.
2. Go to DEVICE MANAGEMENT > Policy Management.
3. In the All tab, click (+).
4. On the New Policy panel, select the Mac tab.
5. Select the Software Update Preferences policy from the list, then click configure.
6. (Optional) Enter a new name for the policy or keep the default. Policy names must be unique.
7. For Policy Notes, enter details like when you created the policy, where you tested it, and where you deployed it.
8. Under Settings, configure these fields:
   1. Select Pre-release Software to include pre-release (beta) software in software update prompts on user devices.
   2. Select App Store Updates to automatically install app updates from Apple’s App Store. 
   3. Select macOS Updates to automatically install OS updates from Apple.
   4. Select macOS Downloads to automatically download new macOS updates from Apple, and prompt the user to install them.
   5. Select Critical Updates to automatically install critical macOS updates, including system data files and security updates.
9. (Optional) Select the Device Groups tab. Select one or more device groups where you’ll apply this policy. For device groups with multiple OS member types, the policy is applied only to the supported OS.
10. (Optional) Select the Devices tab. Select one or more devices where you’ll apply this policy.

11. Click save.
12. After you save and apply this policy, the user must restart the device before this policy can take effect.