Utbildning
Utbildningsväg
MD-100 Manage apps and Windows updates - Training
MD-100 Manage apps and Windows updates
Den här webbläsaren stöds inte längre.
Uppgradera till Microsoft Edge och dra nytta av de senaste funktionerna och säkerhetsuppdateringarna, samt teknisk support.
As an admin for Microsoft 365 Enterprise, you can tailor Microsoft AutoUpdate (MAU) preferences to meet the diverse needs of your users. This article provides an overview of preferences for MAU and helps you understand the documented preferences available.
Preferences for MAU are settings that allow you to customize the behavior of Microsoft AutoUpdate, which is responsible for keeping Microsoft 365 applications up-to-date. By setting these preferences, you manage update frequency and channels, ensuring users receive the latest features and security updates with minimal disruptions.
For more detailed information on preferences and their deployment, see Deploy preferences for Office for Mac.
Determines whether to launch MAU GUI after MAU install/update. This is useful if IT Admin does not want users to see MAU GUI after an update.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Boolean |
Default Value | FALSE |
Manageable | Yes |
Accepted Values | TRUE / FALSE / 1 / 0 |
Comments | Setting this to TRUE will prevent MAU GUI from launching after a MAU install or an update. Note: This does not prevent MAU GUI from launching as a result of finding updates in AutomaticCheck mode. |
Stores user's choice on data collection policy acknowledgment. This policy helps ensure that users are aware of the data collection policies in place.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | String |
Default Value | |
Manageable | Yes |
Accepted Values | RequiredDataOnly |
Comments | Not setting or incorrectly setting this preference leads to Microsoft AutoUpdate (MAU):
|
Anteckning
RequiredAndOptionalData is now deprecated. MAU has never used RequiredAndOptionalData and has always only used RequiredDataOnly for preferences. This preference has now been completely removed.
Specifies how Microsoft AutoUpdate checks for updates.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | String |
Default Value | AutomaticDownload |
Manageable | Yes |
Accepted Values | AutomaticDownload AutomaticCheck |
Comments | Not having this entry, or having an invalid entry reverts MAU to the default 'AutomaticDownload' mode. AutomaticDownload – MAU checks for updates on regular intervals and push updates automatically. Indication an app needs to close in order to complete the update is displayed either in app, or via notification. AutomaticCheck – MAU regularly checks for updates and launches the GUI when it detects an available update. The user initiates the update sequence from the GUI. Manual - MAU checks only for its own updates, not for other updates. This option has been removed from GUI. Setting to Manual results in MAU not offering updates automatically. The following value is deprecated:
Note: Even though Manual setting is deprecated, MAU continues to honor it for the time being. Setting to Manual results in MAU not offering updates automatically. |
ChannelName specifies which update channel Microsoft AutoUpdate receives updates from.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | String |
Default Value | Current |
Manageable | Yes |
Accepted Values | Beta Current CurrentThrottle Custom Preview |
Comments | Not having this entry, or having an invalid entry in ChannelName, reverts MAU to the default 'Current' channel. Following values are deprecated and should no longer be used:
Notes on Channels:
For more information about Preview and Beta channels, see Compare Microsoft 365 Insider channels and Let Mac users choose Microsoft 365 Insider for themselves by using Microsoft AutoUpdate (MAU). |
Note on Per-App channel: You can specify a ChannelName for each app by adding a ChannelName key and value to the specific application that requires a different channel. For example, the following XML snippet shows how to set the channel for Excel to be Current, and everything else to be Beta:
<key>Applications</key>
<dict>
<key>/Applications/Microsoft Excel.app</key>
<dict>
<key>Application ID</key>
<string>XCEL2019</string>
<key>ChannelName</key>
<string>Current</string>
</dict>
......
</dict>
<key>ChannelName</key>
<string>Beta</string>
The ManifestServer is the URL for the server hosting update manifests. MAU downloads update manifests from this location when ChannelName is set to Custom.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | String |
Default Value | |
Manageable | Yes |
Comments | Must point to a valid URL hosting update manifest files. List of files to be hosted are:
|
URL for the server hosting actual update packages. MAU downloads update packages from this location instead of the location specified in the .xml manifest file.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | String |
Default Value | |
Manageable | Yes |
Comments | Set UpdateCache to direct client traffic to an internal update server, reducing high external download traffic. If the correct update package isn't at this location, a 'Download Error' is reported. To populate UpdateCache, copy all updater packages. You can find these packages by examining the contents of .xml files for each application, such as 0409MSWD2019.xml from Current channel. |
Allows Microsoft AutoUpdate to look for updates in Current channel if the specified channel (Beta, Preview, Custom) doesn't have manifests for the registered applications available.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Boolean |
Default Value | TRUE |
Manageable | Yes |
Accepted Values | TRUE / FALSE / 1 / 0 |
Comments | EnableFallbackChannel is useful if you set up ManifestServer location but fail to copy manifests for all the registered applications. Set this preference to FALSE if you don't want to use Current channel as a backup. |
When Set to TRUE, prevents Opt-In notification/pop-up window from showing even when HowToCheck is set to Automatic.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Boolean |
Default Value | FALSE |
Manageable | Yes |
Accepted Values | TRUE / FALSE / 1 / 0 |
Comments | If this entry is missing or set to FALSE, and HowToCheck is set to Automatic, an Opt-In popup window appears. This notification is ignored if the HowToCheck setting isn't Automatic. |
Here are examples of the notification and pop-up window:
DO NOT USE. MAU uses this preference to track the last update check. It won't check for updates again until at least 12 hours pass from that time.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Date |
Default Value | |
Manageable | No |
Comments | Important Don't include this entry in a managed profile. Setting this value via managed profile has the following consequences:
|
DEPRECATED. If set to TRUE, this causes VoiceOver accessibility features to be disabled in Microsoft AutoUpdate. This option is deprecated.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Boolean |
Default Value | FALSE |
Manageable | Yes |
Comments | Deprecated from MAU 4.70. |
DO NOT USE. If set to TRUE, the MAU GUI will open during the first MAU launch after an update. This preference is removed after the MAU GUI's initial launch following the update.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Boolean |
Default Value | FALSE |
Manageable | No |
Comments | Important This preference is only to be used by MAU itself and shouldn't be included in a managed profile. Setting this preference to TRUE in a managed profile causes the MAU GUI to open with every FBA process launch. |
DO NOT USE. Sets the date when ManifestServer setting expires. Currently in use by Teams21 ONLY.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Date |
Default Value | |
Manageable | No |
Comments | Currently in use by Teams21 ONLY. After the indicated date, ManifestServer entry will be removed, effectively reverting the updates to use Current (default) channel instead. |
Lists application registrations. This dictionary can include keys for specific applications and details about how they should be updated. Useful for managing updates on a per-application basis.
Anteckning
For a list of supported AppIDs, see Application identifiers.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Dictionary |
Default Value | |
Manageable | Yes |
Comments | If an app isn't listed and the user never launched the app, the app never updates. Note: LCID entry is now deprecated. Historically, LCID was a part of the Application record in Applications dictionary entry. Identified Language Code to be used to locate language-specific update manifests. No longer applicable. Other key/value pairs that can be added to this dictionary are documented in the App Domain section. |
Example:
<key>Applications</key>
<dict>
<key>/Applications/Microsoft Excel.app</key>
<dict>
<key>Application ID</key>
<string>XCEL2019</string>
</dict>
<key>/Applications/Microsoft Outlook.app</key>
<dict>
<key>Application ID</key>
<string>OPIM2019</string>
</dict>
<key>/Applications/Microsoft PowerPoint.app</key>
<dict>
<key>Application ID</key>
<string>PPT32019</string>
</dict>
</dict>
Used by MAU to search extra information for update paths. For more information, see Set Office License Info for updates for Microsoft AutoUpdate.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | String |
Default Value | |
Manageable | Yes |
Comments |
Example:
<key>Applications</key>
<dict>
<key>/Applications/Microsoft Excel.app</key>
<dict>
<key>Application ID</key>
<string>XCEL2019</string>
<key>Install Priority</key>
<string>High</string>
<key>App Domain</key>
<string>com.microsoft.office</string>
</dict>
</dict>
DO NOT USE. Internal dictionary used by MAU to keep applications dictionary in sync between users on a multi-user device.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Dictionary |
Default Value | |
Manageable | No |
Comments | Setting this preference might conflict with the Applications dictionary. It's advisable not to set it. Note:
|
Part of application record in Applications dictionary.
When set to TRUE in the application record, application won't be displayed on MAU GUI.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Boolean |
Default Value | FALSE |
Manageable | Yes |
Accepted Values | TRUE / FALSE / 1 / 0 |
Comments | This should be set for any app that shouldn't be displayed on the GUI. Examples include: OLIC02 – Licensing helper Setting this disables the app from being updated via GUI when HowToCheck is set to AutomaticCheck. |
Used by Microsoft 365 apps in determining how frequently update ready message bar should be displayed. Unit is hours.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Integer |
Default Value | |
Manageable | Yes |
Accepted Values | 12 - 168 |
Comments | Update ready reminder can be ignored for a maximum of seven days. |
Here's an example of the Update Ready message bar in Excel:
Microsoft 365 applications (>= 16.79) write license related information.
MAU uses this information to offer correct product updates.
For more information, see: Set Office License Info for updates for Microsoft AutoUpdate - Deploy Office | Microsoft Learn
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Dictionary |
Default Value | |
Manageable | Yes |
Comments | Setting this incorrectly disables updates for the Microsoft 365 apps. |
This defines the number of days to wait to offer/install updates after an update is released.
For more information, see: Microsoft AutoUpdate and Deferred Updates
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Integer |
Default Value | |
Manageable | Yes |
Accepted Values | 1 - 28 |
Comments | This value has a tolerance of three days. IT Admins should add three days to the desired deferral days when setting this value. |
Dictionary containing individual app deferral days / version.
For more information, see: Microsoft AutoUpdate and Deferred Updates
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Dictionary |
Default Value | |
Manageable | Yes |
Comments |
When set to TRUE, disables notifications regarding the end of support for the Office suite.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Boolean |
Default Value | FALSE |
Manageable | Yes |
Accepted Values | TRUE / FALSE / 1 / 0 |
Comments |
When set to TRUE, this is used to disable the pulldown menu to select Beta/Preview channels.
Anteckning
Name is historical, from the time when the tickbox controlled enrolling into the Insiders program.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Boolean |
Default Value | FALSE |
Manageable | Yes |
Comments | Should be used to disable channel selection by end users. |
When set to FALSE, this disables the option to initiate a check for updates from the MAU GUI.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Boolean |
Default Value | TRUE |
Manageable | Yes |
Accepted Values | TRUE / FALSE / 1 / 0 |
Comments | IT Admin should set this to FALSE if individual users shouldn't be allowed to initiate checking for updates, or initiate updates themselves. Note: The 'Check for Updates' button is replaced with the 'Update All' button when MAU completes checking for updates. This preference key, when set to FALSE, will also disable the 'Update All' button. |
If set to TRUE, causes verbose logging to be output to MAU log file.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Boolean |
Default Value | FALSE |
Manageable | Yes |
Accepted Values | TRUE / FALSE / 1 / 0 |
Comments | MAU Log will only maintain the last 1MB. Setting this might cause the local log file to lose details. |
Specifies the number of minutes between checking for updates. Default is set to check every 13 hours.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Integer |
Default Value | 780 |
Manageable | Yes |
Comments | Defaulted to 13 hours interval. We recommend this number be a multiple of 60 (one hour). Suggest not exceeding 4320 (three days). |
Deprecated. Incorrectly named. Changed to UpdateCheckInterval to describe its function more accurately.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Integer |
Default Value | |
Manageable | |
Comments | Deprecated |
Dictionary with a list of dictionary entries specifying forced update schedules for applications. This setting is used to enforce updates by a certain date, ensuring that all devices run the latest software version.
See Set a deadline for updates from Microsoft AutoUpdate for more details.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Dictionary |
Default Value | |
Manageable | Yes |
Comments | Should be set to enforce updates by a certain date. |
Example:
<dict>
<key>path to the application</key>
<dict>
<key>"Application ID"</key>
<String>OPIM2019</String>
<key>"ForcedUpdateDate"</key>
<Date>2024-04-01</Date>
<key>"ForcedUpdateVersion"</key>
<String>16.84.24032800</String>
</dict>
</dict>
To configure a deadline that is a certain number of days after the update is detected, use the following preference setting.
For more information, see: Set a deadline for updates from Microsoft AutoUpdate
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Integer |
Default Value | |
Manageable | Yes |
Comments | MAU is calculating deadline dates based on the day updates are found on that device. Not from when Microsoft released the patches. Starting from StartAutomaticUpdates number of days before deadline is reached, there will be a prompt displayed to user every 12 hours |
Here's an example of the prompt that's displayed.
Number of minutes before the deadline date Forced Update Dialog will be displayed.
For more information, see: Set a deadline for updates from Microsoft AutoUpdate
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Integer |
Default Value | 60 |
Manageable | Yes |
Comments | The range for this value is 10 to 720. Starting from the FinalCountDown, the number of minutes before the deadline, MAU displays a prompt to the user each time it runs. Applications automatically close once the countdown is reached. |
Here's an example of the prompt that displays.
Number of days before forced update date that MAU treats every update as AutomaticDownload.
Using this preference setting enables Automatic Download and Install mode for MAU regardless of the current MAU HowToCheck setting on the device. After the deadline is reached, MAU will revert to the previous setting on the device.
For more information, see: Set a deadline for updates from Microsoft AutoUpdate
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Integer |
Default Value | 3 |
Manageable | Yes |
Comments | Value less than three is treated as three. Value can't be bigger than DaysBeforeForcedQuit. |
Custom title to be used for showing Forced Update dialogs.
For more information, see: Set a deadline for updates from Microsoft AutoUpdate
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | String |
Default Value | Your admin has setup a deadline for the updates. |
Manageable | Yes |
Comments |
Determines whether to optimize for smaller download size (default) or faster background install times for Office App Updates.
One of: Size, Network, CPU, or None.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | String |
Default Value | Size |
Manageable | Yes |
Accepted Values | Size Network CPU None |
Comments | Setting this value to None causes Full updaters to be downloaded, impacting network usage. Unless there's a reason to use Full updater, this value should be left empty, or set to Size. |
Setting this preference to TRUE keeps a clone of an application in cache location always.
Needed as some security apps were modifying installed apps under /Applications folder, causing updates to fail.
Category | Details |
---|---|
Domain | com.microsoft.autoupdate2 |
Type | Boolean |
Default Value | FALSE |
Manageable | Yes |
Accepted Values | TRUE / FALSE / 1 / 0 |
Comments | Use this preference if your organization uses a security app that modifies installed apps. An indication to suspect a security app modifying the installed app would be frequent update failures resulting in full updater downloads for all Microsoft 365 apps. Office app updates come through as "binary delta" updates, where only changed bits are updated. Having a security app that modifies the actual installed application will cause verification failure after each binary delta update, forcing a full updater package download. One can tell if the app was modified by running the following verification from the terminal app. This fails if the integrity of the application is compromised:codesign –vv --deep <<path to the app>> |
Utbildning
Utbildningsväg
MD-100 Manage apps and Windows updates - Training
MD-100 Manage apps and Windows updates