Which profiles does MDM update after a macOS update occurs? - SimpleMDM

You may have noticed that things look a little different. SimpleMDM is now part of the PDQ.com family and we are in the process of moving all of the SimpleMDM Knowledge Base articles to their new home. If you notice any links that are broken or if anything does not work as expected, please email support@simplemdm.com and let us know!

Some macOS-specific profiles may not be supported in older versions of macOS. When the profiles are installed via MDM on devices running versions of macOS that do not support the profiles, the configurations will not be honored. A problem can occur after an update where even if the new version of macOS supports the profile, macOS may not start honoring the profile's configuration.

This problem can be solved by re-installing the profile(s) on the devices after the update has finished. SimpleMDM helps with this by re-pushing certain profiles once a device checks in with MDM and detects that an OS update has occurred.

SimpleMDM will automatically re-install the following profiles after a device checks in and a macOS update is detected:

  • Privacy Preferences Policy
  • Kernel Extensions Policy
  • FileVault
  • Custom Configuration Profiles

In addition, it is important to note that this can still leave a bit of a delay between the completion of the OS update and when the device actually contacts MDM. To further address this issue, our team has created a script that will force devices to check-in with MDM immediately after an update occurs to allow MDM to re-push any necessary profiles to allow the configurations to start functioning right away after the update. If you are interested, please contact our support team and they will provide you with the script and instructions to deploy it.

Still have a question or want to share what you have learned? Visit our Community to get help and collaborate with others.