This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Hello Experts,
hope you are doing well.
Is it possible to restrict macOS devices from updating through an Intune policy?
Our Mac's are enrolled either via the Apple Business Manager or via the Intune company portal App.
Sometimes new macOS versions introduce new bugs or compatibility issues so we would like to restrict the devices going immediately to the latest one.
As per this document no macOS update restriction feature is listed:
https://learn.microsoft.com/en-us/mem/intune/configuration/device-restrictions-macos
So, we'd like to get a confirmation if it is possible to restrict macOS updates via Intune or manage them in any way, shape or form?
Thanks!
This functionality is currently in development; see https://learn.microsoft.com/en-us/mem/intune/fundamentals/in-development#new-software-update-restriction-settings-for-macos
@Jason Sandys Thanks for the reply. And until the feature is actually out and ready to be used, is there a way to restrict/manage macOS updates? If, it is possible any official documentation on the matter will be appreciated.
Not directly using Intune.
You may be able to use Apple Configurator to create a policy that can be pushed out with Intune, but I'm not an expert there so don't truly know what can or can't be done using this path.
What is the current status on this feature?
Kind regards,
Willem Lang
At this time, there are no public updates on this feature -- it is still in development.
@Jason Sandys regarding Device configuration - software updates for OSX devices. I tried to search the roadmap and could not locate this. Do you have a project ETA?
Intune now is has the options to manage updates, but it is still not possible to set deadlines or minimum versions across the update settings. We use Intone Update settings along with Nudge to get best results. Nudge has a nagging option an that works best, user gets reminders every few days and when the deadline has passed it wil start to be annoying up to the level that the user will go and perform the updates....
Can I ask how you managed to deploy nudge? When trying to do so it fails via intune deployment? Also where is this new manage update option for Mac in intune?
Microsoft introduced this future recently. Please have a look
Remotely manage how downloads, installations, and notifications should occur when the following types of updates are available for macOS:
Thanks, we tested it a while before when the feature to configure this policy was first available but it was too restrictive and didn't have so much options as the new documentation you posted. Currently we have configured all ABM devices we have to get notified that there is a new version available. We'll definitely look into this.