Software Update
Published by Apple, Inc.
Maintain stability and security with granular control over Apple software update behavior. Orchestrate when and how devices receive OS updates by configuring automatic installation preferences, defining deferral periods for testing and validation, and managing access to beta releases, ensuring your organization stays protected without disrupting productivity. Balance the need for timely security patches against operational stability by implementing phased rollout strategies that let you test updates with pilot groups before broad deployment across your entire Apple ecosystem.
Configure Vulnerability Response settings to automate critical security patch deployment when high-severity or critical CVEs (Common Vulnerabilities and Exposures) are detected in managed applications across your Mac devices. This profile enables IT administrators to establish automated remediation workflows that leverage Kandji Auto Apps to immediately update vulnerable software without requiring manual intervention or user action. Vulnerability Response reduces the window of exposure to actively exploited security flaws by eliminating deployment delays, ensuring compliance with security patch timelines, and protecting endpoints from known threats through intelligent, priority-based update enforcement that responds dynamically to emerging vulnerability disclosures.
Configure App Store settings for Apple devices, including automatic app updates, app installation restrictions, and in-app purchase controls. Manage user access to the AppStore, enforce organizational policies for app downloads, and control whether users can install apps from sources outside the AppStore. Deploy this profile to standardize app management policies, enhance security by preventing unauthorized software installations, and ensure compliance with organizational software standards across your devices.
Control device behavior and security with granular configuration policies across your Apple devices. Apply comprehensive restrictions to manage functionality, security settings, and user experience—from app limitations and content filters to hardware features and network controls. Supervision-required options unlock advanced restrictions for iPhone, iPad, Apple TV, and Vision Pro devices, enabling deeper organizational control.