Can macOS OS updates be scheduled outside working hours in Hexnode?Solved

Hexnode currently does not provide a maintenance window setting inside macOS OS update policies. When a macOS update policy is pushed to a device, the update workflow can begin based on the policy configuration and applicable update criteria. This means the download, installation, or restart behavior is not restricted to a specific after-hours window through the policy itself.

If you need to trigger OS updates at a specific time, the available workaround is to use Automation to schedule the OS update action for the desired time, such as after 6 PM. For the automation to run successfully, the Mac must be online, have a stable internet connection, and check in with the Hexnode portal around the scheduled time.

So policies and automation are separate here, right? If I assign the OS update policy, I cannot pause it until evening, but if I use automation I can choose when the update action runs?

Yes, that is correct. A macOS OS update policy does not have an option to suspend execution until a maintenance window. Automation is separate and can be scheduled to run at a defined time. In practice, if your goal is to avoid updates being initiated during working hours, use a scheduled automation instead of relying on a continuously applied OS update policy for timing control. Keep in mind that the device must check in with Hexnode at the scheduled time; otherwise, the action may not execute immediately.

We are using profile-based enrollment for these Macs, not device-based enrollment. Does that change the scheduling option?

The scheduling limitation is the same for the OS update policy. Profile-based enrollment does not add a maintenance window option to macOS update policies. The practical workaround remains scheduled automation. As long as the enrolled Mac is reachable and checks in with Hexnode when the automation is scheduled, the OS update action can be triggered at the configured time.