Sections
Purpose
This article provides guidance on preparing Apple devices (macOS, iOS, and iPadOS) for centrally managed software updates deployed by OIT Managed Desktop Services using Jamf and Declarative Device Management (DDM).
What do I need to do?
You will receive a notification that your Apple device requires a software update. Follow the steps outlined below based on your device type to ensure successful compliance. OIT Managed Desktop Services Support team members are available to assist with update related issues.
User Actions —– macOS Computers—– User Actions
- Watch for prompts like these.
-
Scheduled by OITMDS
Appears when Apple Software updates are available
-
- Ensure your Mac is connected to a stable network
- Keep your device powered on and awake during update windows.
We recommend performing macOS updates manually once you are notified which will be prior to any mandated deadline.
User Actions —– iOS Devices (iPads/iPhones) —– User Actions
- Ensure the device is connected to a stable network
- Updates will install automatically or prompt you with options depending on configuration.
⚠️ End of user responsibility ⚠️
For Support —– Apple Devices & Computers —– For Support
Apple’s Declarative Device Management (DDM) allows automated updates without admin rights or VPN. Settings are deployed via Jamf Pro using configuration profiles.
| Update Action | Description |
|---|---|
| Download Only | Downloads update, not installed |
| Download + Install | Installs after download |
| Schedule Install | Sets install time |
| Install + Deferral | User may defer update up to 99 times |
| Force Install + Restart | Update and restart occur automatically |
Only devices running macOS 14+ or iOS/iPadOS 17+ can receive managed updates.
Post update actions
After the initial push of updates, there inevitably will be some cleanup. To do this, we used a webhook, an API call, a Google Apps Script, and a Google Sheet to determine which computers still haven't been updated, and use this to automatically generate tickets.
- Update success is confirmed via webhook → API call → Google Sheet → Email alert to
OIT_DESKTOP_SUPPORT. - Easily check compliance using a Jamf Pro Dashboard