Trouble with pushing updates with a newer update in deferral #315
bigSteve2001
started this conversation in
General
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
We are seeing an issue deploying deferred updates since Apple is releasing them too quickly.
We are highly regulated and have a ton of security tools that we need to test with each OS update.
Therefore, we have policies for various groups that have they deferrals set like this:
enforcedSoftwareUpdateDelay = 14
enforcedSoftwareUpdateMajorOSDeferredInstallDelay = 90
enforcedSoftwareUpdateMinorOSDeferredInstallDelay = 14
forceDelayedAppSoftwareUpdates = 1
forceDelayedMajorSoftwareUpdates = 1
forceDelayedSoftwareUpdates = 1
14 days after the system sees an update it becomes available and super is great at seeing this and running with the alerts
However, I am now seeing if a newer update is released super no longer sees the now no longer deferred older update
For example:
Current OS 15.6.1
Available updates 15.7
Deferred updates 15.7.1 & 26.1
Which means I have systems with MacOS 15.6.1 showing 15.7 available in the gui as well as in softwareupdate -l
root@XLTC56294GRHH ~ # softwareupdate -l
Software Update Tool
Finding available software
Software Update found the following new or updated software:
Title: macOS Sequoia 15.7, Version: 15.7, Size: 2049623KiB, Recommended: YES, Action: restart,
Yet, when I run super it does not show 15.7 as an available update, just 15.7.1 and 26.1
I dug through the super script and you are getting the deferrals with this command: /usr/libexec/mdmclient AvailableOSUpdates
However that command only shows the deferred state for the latest OS in that OS group (only shows 15.7.1 and 26.1 but nothing lower
How can we push 15.7 while 15.7.1 is still deferred?
All reactions