The Software Update MDM Profile enables you to manage update settings local to macOS. These update settings are independent of Addigy's MDM and DDM updates and will only dictate how the automatic update actions from the OS behave.
For more information on DDM updates, please reference this article: Overview: System Updates via DDM
For more information on MDM updates, please reference this article: Overview: System Updates via MDM
Configuring the Profile
To begin creating this profile, navigate over to Catalog > MDM Profiles, select "New", and choose "Software Update". You will then be presented with a list of options:
Overview of Settings
The below is courtesy of Apple's developer documentation (with some extra clarification where needed).
Software Update Server URL (deprecated on macOS 11+)
The URL of the software update catalog. This property is not supported in macOS 11 and later.
Restrict app installations to admin users
If true, restrict app installations to admin users. This setting has the same function as the restrict-store-require-admin-to-install setting in the com.apple.appstore payload.
Note: This will not prevent standard users from updating the OS via System Settings > Software Update.
Allow installations of beta releases
If true, prerelease (beta) software can be installed on this computer.
Automatically install app updates
If false, deselects the “Install app updates from the App Store” option and prevents the user from changing the option.
Automatically install macOS updates
If false, restricts the “Install macOS Updates” option and prevents the user from changing the option.
Automatically check for updates
If false, deselects the “Check for updates” option and prevents the user from changing the option.
Automatically background downloads for updates
If false, deselects the “Download new updates when available from the App Store” option and prevents the user from changing the option.
Automatically install XProtect, MRT, and Gatekeeper updates
If false, restricts the automatic installation of configuration data.
Automatically install critical updates
If false, disables the automatic installation of critical updates and prevents the user from changing the “Install system data files and security updates” option.