Applies to: Centrify DirectControl for Mac OS X 10.7 and higher
Question:
Since there is no more group policy to configure the Apple automatic update option in the System Preferences > App Store panel of OS X.
Is there a way to toggle this via GP?
Answer:
Automatic updates in OS X can be enabled or disabled via command line; for example to disable automatic updates, the following command can be used:
sudo /usr/sbin/softwareupdate --schedule off
To enable automatic updates, use this instead:
sudo /usr/sbin/softwareupdate --schedule on
To push these commands out via group policy, use the GP at:
Computer Configuration / Centrify Settings / Common UNIX Settings / "Specify commands to run"
(The "centrify_unix_settings.xml" template needs to be imported into the GPO to be able to see this GP)
Note: To see additional update options and usage syntax, see the help file in:
/usr/sbin/softwareupdate --help
or use the below workaround:
1. Use to the Group Policy "Computer Configuration > Policies > Centrify Settings > Common UNIX Settings > Specify commands to run"
2. Add the below commands for the desired settings to enable. No need to add sudo.
Automatically check for updatesdefaults write /Library/Preferences/com.apple.SoftwareUpdate AutomaticCheckEnabled -bool TRUE Download newly available updates in the backgrounddefaults write /Library/Preferences/com.apple.SoftwareUpdate AutomaticDownload -bool TRUE Install app updatesdefaults write /Library/Preferences/com.apple.commerce AutoUpdate -bool TRUE Install OS X updatesdefaults write /Library/Preferences/com.apple.commerce AutoUpdateRestartRequired -bool TRUE Install system data files and security updatesdefaults write /Library/Preferences/com.apple.SoftwareUpdate ConfigDataInstall -bool TRUE
defaults write /Library/Preferences/com.apple.SoftwareUpdate CriticalUpdateInstall -bool TRUESee also: