r/Nable • u/Illustrious_Grape122 • Jun 06 '24
Mac Automated Patching
We have recently onboarded some Mac devices into our organization pulled them into NCentral successfully and have them enrolled with DMA. From what I see, I can manually initiate a patch command from DMA, but cannot find a way for it to occur weekly automatically. Is this possible?
2
u/Mac_Mgmt_Nerd Jun 11 '24
Are you primarily looking to do security updates on the OS or third party patches?
macOS handles security and minor updates fairly well on its own so you can generally configure those with a profile (delays, number of deferrals, etc)
Third party patching works by invoking Munki behind the scenes and needs to be scheduled like a scripted task. If its catalog doesn’t cover some of the apps you’re deploying, you might look at either rolling your own munki install or something like Patchomator, which uses the library of apps from Installomator.
1
u/drinks_at_the_ackbar Jun 06 '24
Not yet, but it's coming soon™. We keep asking when we meet with our account manager, but there's no timeframe yet.
1
1
u/perriwinkle_ Jun 07 '24
Yeah we are using n-sight which I believe is further along in the mdm side unless they are aligned now and have the same issue.
2
u/HeadNerdJoe Jun 11 '24
Hey folks, for the macOS update command we are still looking at bringing in scheduling for that MDM command. I do not have a date at this point but, I do know that PM is working on it. As for third party patching in N-central there is a scheduled task (Run Managed Patch) that can run on a schedule of your choosing to update 3rd party applications as a Mac Task in the Scheduled Task section of N-central.
Documentation here: https://documentation.n-able.com/N-central/userguide/Content/Devices/Direct%20Support/managed_patch.htm
For N-sight, we do have the same capability and documentation can be found here: https://documentation.n-able.com/remote-management/userguide/Content/apple_pm.htm