Good news, Mac admins! Software update management via Declarative Device Management (DDM) is officially here for macOS. DDM updates have been around for iOS, tvOS, and visionOS for a while, and now macOS is finally joining the party.
To give you complete control over your update rollout, we have added two new policies under macOS > Patches and Updates:
- Patch Preferences
- Notifications & Permissions: Toggle update notifications and choose whether standard users are allowed to install updates themselves.
- Automatic Software Updates: Take control of automatic patch downloads, standard patch installations, and security updates (you can force these on, turn them off, or let the user configure them).
- Beta Updates: Manage whether devices can enroll in beta programs and specify which beta programs are allowed.
- Rapid Security Responses: Decide whether to automatically install Rapid Security Responses and whether users are allowed to remove them.
- Patch Deferral Settings
- Major OS upgrades
- Minor OS updates
- Non-operating system software updates
Want to tweak how updates behave on your Macs? This is where you configure the day-to-day settings. Just hit Configure to manage:
Need to buy some time before a new release hits your fleet? We get it. Hit Configure here to pause incoming updates by setting a custom number of days to defer:
It’s all about giving you the breathing room to test and deploy updates at your own pace, without compromising device security.
Ready to get started? Check out our help documentation on configuring DDM software updates.
Regards,
Sienna Carter
Hexnode UEM