macOS users cannot see or install updates with Hexnode Software Update policySolved

Participant
Discussion
1 month ago Sep 28, 2026

Some of our Macs are on the same build and are targeted by the same Hexnode policy, but software updates are behaving inconsistently. A few users can see and install the latest macOS update, while others either do not see the newest version or cannot proceed with the install.

The goal is to let end users manually check for and install macOS updates themselves. I currently have the Software Update preference set to enabled in the policy. Do I also need to configure update automation for this, or is enabling user access enough?

Another confusing part: before enabling this setting, the policy was unconfigured. One user could see an update, but when macOS asked for credentials, neither the user credentials nor admin credentials allowed the install to continue. Also, one Mac on an older minor version could only see the previous update, not the latest available one.

Replies (1)

Marked SolutionPending Review
Hexnode Expert
1 month ago Sep 28, 2026
Marked SolutionPending Review

Hi @elliot,

For user-driven macOS updates, enabling the “Automatically install macOS updates” in the Software Update preference policy is the correct setting.

When this option is enabled, the Software Update section remains accessible on the Mac, allowing end users to manually check for, download, and install available macOS updates. You do not need to configure software update automation if your intention is only to let users install updates themselves.

The behavior of the setting can be understood as follows:

– Enabled: Users can access the software update on the device and manually install available updates.
– Disabled: The software update access is restricted or removed from the user side.
– Unconfigured: Hexnode does not apply the specific Software Update preference setting to the device.

After changing the policy from unconfigured to enabled, restart the affected Macs so the updated restriction state is applied cleanly. Also verify that the same devices are not receiving another conflicting policy that disables or restricts Software Update access.

Regards,
Sienna Carter
Hexnode UEM

Save