Question on iOS update policies in Intune

Question

Hello,

I want to use Graph to update the iOS version in different iOS update policies.

When looking up a policy I noticed this setting:

"enforcedSoftwareUpdateDelayInDays": null,

Is that the old deprecated setting or a feature that still has to be released? Because it sounds like something I'm looking for.

We have 4 environments that should receive an iOS update after a specific timeframe after a new release.

Because the iOS update policy does not take into account the delay configured in the device restrictions policy we always have to manually update the policy to the latest accepted version.

If we could just define a default delay in each update policy that after x amount of days the update is downloaded and installed automatically that would be great.

{
    "@odata.context": "https://graph.microsoft.com/beta/$metadata#deviceManagement/deviceConfigurations/$entity",
    "@odata.type": "#microsoft.graph.iosUpdateConfiguration",
    "id": "a59xxxx-xxxx-xxxx-xxxx-xxxxxxxxxxxx",
    "lastModifiedDateTime": "2023-01-11T08:21:11.9507753Z",
    "roleScopeTagIds": [
        "0"
    ],
    "supportsScopeTags": true,
    "deviceManagementApplicabilityRuleOsEdition": null,
    "deviceManagementApplicabilityRuleOsVersion": null,
    "deviceManagementApplicabilityRuleDeviceMode": null,
    "createdDateTime": "2022-12-02T10:22:05.738444Z",
    "description": "",
    "displayName": "XXX_iOS_PRODUCTION_Update_Policy",
    "version": 2,
    "isEnabled": false,
    "activeHoursStart": "00:00:00.0000000",
    "activeHoursEnd": "00:00:00.0000000",
    "desiredOsVersion": "16.2",
    "scheduledInstallDays": [],
    "utcTimeOffsetInMinutes": null,
    "enforcedSoftwareUpdateDelayInDays": null,
    "updateScheduleType": "alwaysUpdate",
    "customUpdateTimeWindows": []
}

Thank you,

Joachim

Answer 1

Hi Joachim, The enforcedSoftwareUpdateDelayInDays property in the iOS update policy is not deprecated. This property represents the number of days a software update is delayed for supervised devices. For example, if the value is 10, the supervised devices will update the software 10 days after the software update is released. If this property is null, the device will update the software as soon as the update is available. To define a default delay, you can set a value for the enforcedSoftwareUpdateDelayInDays property in each update policy. Please note that this property applies to supervised devices only. Non-supervised devices ignore this setting and install updates according to the default settings on the device. Here is a sample code snippet for setting this property:

PATCH https://graph.microsoft.com/beta/deviceManagement/deviceConfigurations/{id}
Content-Type: application/json

{
  "enforcedSoftwareUpdateDelayInDays": 10
}

Replace {id} with the id of your update policy. Read more on this API from this page. You can also see how to set the delay in the policy via the Intune UI from here.