Tips for finding Knowledge Articles

  • - Enter just a few key words related to your question or problem
  • - Add Key words to refine your search as necessary
  • - Do not use punctuation
  • - Search is not case sensitive
  • - Avoid non-descriptive filler words like "how", "the", "what", etc.
  • - If you do not find what you are looking for the first time,reduce the number of key words you enter and try searching again.
  • - Minimum supported Internet Explorer version is IE9
Home  >

KB-2999: The policy "Automatically check for software updates" does not work as expected

Mac & PC Management Service ,  

12 April,16 at 11:07 AM

Applies to: Centrify DirectControl version 5.1 for Mac OS X

The group policy "Automatically check for software updates" does not work as expected for Mac OS X. 

After enabling this policy, software updates are not automatically installed. Manually checking for available software updates work.


This policy has been deprecated and will be removed in future releases of DirectControl for Mac 


To just toggle the setting and let OS X manage the automatic updates, see:
To manage the timing of the automatic updates directly, follow the steps below:
  1. Enable the following GP:
    • Computer Configuration > Policies > Centrify Settings > Common UNIX Settings > "Set contrab entries"
    • (The "centrify_unix_settings.xml" template needs to be added into the GPO for this policy to be visible) 
  2. Add the crontab entries according to the desired update times, for example:
    • To check for software updates at 0:00 on a daily basis (no reboot prompt):
      • 0 0 * * *  root /usr/sbin/softwareupdate -i -a
    • To check for software updates at 15:00 on a daily basis (no reboot prompt):
      • 0 15 * * *  root /usr/sbin/softwareupdate -i -a
    • To check for software updates at 15:00 on a daily basis and notify the user when a reboot is required: 
      • 0 15 * * * root /usr/sbin/softwareupdate -l | grep 'restart'; if [ $? -eq 0 ]; then RESTART=1; fi; /usr/sbin/softwareupdate -i -a; if [ $RESTART -eq 1 ]; then /usr/bin/osascript -e 'tell app "System Events" to display alert "Software update installed. Please restart your computer."'; fi
  3. The policy option should take effect after the next user login

  • Users will only receive the prompt that a system reboot is needed when logged into the system. The reboot prompt will not be displayed at the OS X login window
  • The software update time can be modified as needed as shown:
    • Change "0 15 * * *" to "0 20 * * *" to trigger update check at 20:00 daily
    • Change "0 15 * * *" to "0 0 * * *" to trigger update check every hour on a daily basis
  • ​For more information on cron jobs, see also: (External links provided as a courtesy)

Still have questions? Click here to log a technical support case, or collaborate with your peers in Centrify's Online Community.