メインコンテンツへスキップ

184: Managed macOS Updates (Declarative Device Management)

Implementation Effort: Low – Configured directly in the Intune Settings Catalog using Apple Declarative Device Management (DDM).

User Impact: Low – Provides autonomous, predictable OS update enforcement and clearer end-user notifications.

Overview​

Managing software updates on macOS (and iOS/iPadOS) in Microsoft Intune has transitioned to Apple Declarative Device Management (DDM).

Important Deprecation Notice (2025–2026): With the release of iOS 26, iPadOS 26, and macOS 26, Apple deprecated legacy MDM software update commands and payloads. Microsoft Intune is retiring and removing legacy Apple MDM software update workloads (Devices > Update policies for macOS/iOS and legacy Software Update settings in Device Restrictions). All Apple software updates must be configured using DDM in the Intune Settings Catalog.

Benefits of DDM Software Updates​

  1. Device Autonomy: The device proactively evaluates and enforces update deadlines locally without relying on continuous MDM server polling.
  2. Assignment Filters Support (March 2026 / 2602): DDM software update policies in Intune now support Assignment Filters (including the GA operatingSystemVersion property) to stage updates across rings.
  3. Background Security Improvements: Supports Apple's rebranded Background Security Improvements (formerly Rapid Security Responses) and Apple OS 27 DDM status reporting in Device Inventory.

Key Configuration Steps​

  1. Sign in to the Microsoft Intune admin center.
  2. Go to Devices > Manage devices > Configuration > Create > New policy.
  3. Select macOS (or iOS/iPadOS) for platform and Settings catalog for profile type.
  4. Expand Declarative Device Management (DDM) > Software Update and configure the target OS version, target build, and local enforcement date/time.
  5. Assign the policy using Assignment Filters and retire any legacy MDM Update Policies.

Reference​