Control OS Updates across a mixed device setupSolved

Yeah, this is doable. You can deploy updates silently, but I think behavior differs a bit across platforms.

We had a similar setup. The main challenge wasn’t configuring updates, it was making sure users didn’t delay or interfere. Especially on Windows, people tend to pause updates or postpone restarts.

Exactly. That’s what I’m trying to avoid. I want updates to just happen, ideally during off-hours, without relying on users at all.

Hi @harold,

The key here is to standardize update behavior across platforms while removing user intervention as much as possible.

For Windows, configure this under Policies > Windows > Patches & Updates > Windows Update Experience.

• Set the automatic update behavior to disable user control, auto install and restart at a specific time.
• Define the schedule frequency, schedule install day, and schedule install time (for example, Tuesday at 03:00), so updates happen during non-working hours.
• Enabling options like skip restart checks and disable pause updates ensures users can’t delay the process.

For macOS, you will need to combine preferences with enforcement, under Policies > macOS > Patches & Updates > Software Update Preferences.

• Ensure update deferral options such as defer major upgrades, defer minor upgrades and defer app upgrades are disabled, and enable automatically install critical updates, and install rapid security responses.
• In macOS > Security > OS Updates, set the action to download and install updates directly. This bypasses user prompts and ensures updates are applied without manual intervention.

For Android, it depends on enrollment. On Android Enterprise devices (Device Owner mode), go to Policies > Android > Security > OS Updates.

• Configure the system update settings to update automatically. This ensures updates are applied without user interaction.

For more information regarding the above-mentioned options, you can check out the documentation of Windows, macOS and Android.

Regards,
Sienna Carter
Hexnode UEM

Thank you, this is definitely worth trying out.