We didn't realize there was a new one released but what we have now works) calls to update the Microsoft AutoUpdater. The old script MSUpdateHelper4JamfPro.sh provided by (which is what we're currently using - we haven't tried the new one. This is where we think most of the issues are occurring with people's deployments. MobileConfig seems to not be updated to the latest security settings that we've determined JAMF, and the AutoUpdate tools need. With the release of macOS 10.14 (Mojave), there were a lot of security changes namely PPPC restrictions that caused the command-line MSUpdate tool to not be able to communicate with the Microsoft AutoUpdate Daemon, and JAMF not having the correct PPPC permissions to run and interact with everything that it needed to. GitHub repo to our modified script and MobileConfigs: I imagine a lot of you are here to maybe see if this solution will work with possible issues you've been having on your AutoUpdating for Mac 2019, we've spent quite some time on it on and off, and I think we've come up with a solution that works well (at least in our environment).įirst off I'd like to start by giving credit to the people who've contributed to this for creating resources and utilities and providing the tools and scripts to make this work - And the countless hours of endless support given to the community.ĭuper51 a fellow co-worker of mine who helped immensely with the debugging and solution of this.Ĭarl Ashley for providing some useful documentation on viewing the MacOS TCC log to solve the PPPC violations that no one really knew were happening. If you disable or don't configure this policy, update checks aren't suppressed during any specific period.Hello, fellow Mac Systems Administrators, For example, if the start time is 22:00 and the duration is 480 minutes, updates will be suppressed for exactly 8 hours, regardless of whether daylight saving time starts or ends during this period. Duration isn't affected by daylight saving time. If you enable this policy, update checks are suppressed each day starting at Hour:Minute for a period of Duration (in minutes). Supported values: 0 // Always allow updatesīack to top UpdatesSuppressed Time period in each day to suppress auto-update check The 'Update policy override default' and per-application 'Update policy override' settings should be used to manage application updates rather than this setting. This is not recommended, as it prevents EdgeUpdater itself from receiving stability and security updates. Set this policy to the value 0 to disable all periodic network traffic by EdgeUpdater. Minimum number of minutes between automatic update checks. Specifies how EdgeUpdater handles available updates from Microsoft Edge.īack to top AutoUpdateCheckPeriodMinutes Auto-update check period override Supported values: 0 // Always allow updatesīack to top Update Update policy override If you don't enable and configure this policy, EdgeUpdater handles available updates as specified by the ' Update policy override' policy. If you disable updates, periodically check for updates, and distribute them to users. If you select manual updates, make sure you periodically check for updates by using the app's manual update mechanism, if available. Updates disabled: Updates are never applied.Manual updates only: Updates are applied only when the user runs a manual update check. Automatic silent updates only: Updates are applied only when they're found by the periodic update check.Always allow updates: Updates are always applied when found, either by periodic update check or by a manual update check.If you enable this policy, EdgeUpdater handles Microsoft Edge updates according to how you configure the following options: Can be overridden for individual channels by specifying the ' Update policy override' policy for those specific channels. Lets you specify the default behavior for all channels concerning the way EdgeUpdater handles available updates for Microsoft Edge. Time period in each day to suppress auto-update checkīack to top UpdateDefault Update policy override default Use the links in the table to get more details about specific policies. These tables list all of the update-related group policies available in this release of Microsoft Edge. This article applies to Microsoft Edge version 113 or later.
0 Comments
Leave a Reply. |
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |