macOS Update OS remote action does nothing in HexnodeSolved

Participant
Discussion
4 weeks ago Sep 04, 2026

We manage a macOS fleet through Hexnode and tried using the Update OS remote action with Download and install. The target Mac already showed the required macOS update as available locally, and the bootstrap token was escrowed. However, after triggering the action from Hexnode, nothing happened on the device and no clear error appeared in the console.

The Mac is enrolled through standard Device Enrollment and not ADE/DEP. We also noticed the Software Update Preferences policy landing as legacy restriction keys rather than a DDM declaration.

A few things I’m trying to confirm:

– Does Hexnode’s Update OS action use legacy MDM commands or DDM?
– Is ADE required for macOS update enforcement?
– Why would the action appear available but not execute?
– Is there a way to set a target OS version and install deadline for macOS updates?

Replies (1)

Marked SolutionPending Review
Hexnode Expert
4 weeks ago Sep 04, 2026
Marked SolutionPending Review

Hi @ace_98,

Hexnode’s macOS Update OS remote action currently uses Apple’s legacy ScheduleOSUpdate MDM command. Declarative Device Management-based software update enforcement is the future path for macOS update management, especially because Apple has deprecated legacy software update commands in newer macOS versions and removes them in a later release.

For the behavior you described, there are a few important points:

1. DDM and deadlines
Target OS version and deadline-based enforcement depend on DDM being active on the endpoint. Without DDM-based update enforcement, strict install deadlines cannot be reliably enforced.

2. ADE is not a hard requirement
Standard profile-based Device Enrollment Macs can receive OS update commands. A Mac does not need to be ADE-enrolled just for the current Update OS action to work.

3. Command status visibility
Hexnode currently does not provide detailed per-command macOS update status that clearly separates command delivery, device acknowledgement, local rejection, or silent ignore states.

4. Update OS action and OS Updates policy are different
–Update OS remote action sends an immediate command to download and install the update.
–OS Updates policy schedules periodic update checks and does not force an instant installation as soon as the policy is associated.

Regards,
Sienna Carter
Hexnode UEM

Save