Category Filter

How to schedule OS updates on macOS Devices?

Apple releases major new versions annually and several minor OS updates for macOS devices throughout the year. Before deploying a macOS update, it is recommended to determine whether your organization’s workflow is compatible with a new version of macOS. Hence, a systematic approach to OS upgrading is essential to ensure macOS security. Hexnode helps administrators schedule software updates on macOS devices using the OS updates policy or via remote action. You can easily restrict or reschedule the available OS updates on the managed devices.


  • After an update, the device passcode is wiped. You need to set it up later.
  • UEM can push macOS updates automatically only to a DEP-enabled Mac.
  • Before installation, make sure the device is connected to the internet. It confirms the installation of both macOS updates and firmware updates available for the Mac.

It is highly advised to update to the latest OS version to receive access to all the new UEM features.

Setup scheduled macOS updates via policy

To schedule macOS updates on your managed devices via policy,

  1. From the Hexnode dashboard, go to Policies > New Policy. Assign a suitable name and description (optional) for the policy. You can also choose to continue with an already existing policy.
  2. Navigate to macOS > Security > OS Updates and click Configure.
  3. When an OS update is available, any of the following actions can be scheduled. The action specifies how the OS update is to be handled on macOS devices.
    Actions Description
    Notify Only Notify the user of a software update via App Store.
    Download Only Download the software update without installing it.
    Download and Install Downloads the updated version and starts installation immediately. Installation begins If the software update has been previously downloaded.
    Install Installs an already downloaded software update.
    Install later Download the software update and install it later.
  4. Next, associate the policy to a target device from Policy Targets > +Add Devices. You can also choose to associate the policy to a device group, user, user groups or domain from the left pane.
  5. Click Save to apply the policy to the target device.