Recent searches
Search options
JUST A REMINDER: 13.1 is the first Ventura update past the 30 day hold for OTA major upgrades for MDM managed macOS devices
If you have devices on 12.3-12.6 still and you DO NOT have a minor deferral in addition to a major deferral - on these buggy versions of macOS (12.6.1+ fixes the bug), 13.1 OTA will be seen as a -minor- update, not major and as such will NOT be deferred by only having a major deferral in place.
1/n
TL;DR: -Only- got a major deferral in place? All your 12.3-12.6 Macs will be offering 13.1 to all of your users TODAY.
If you find yourself in this situation and you do not want this?
Roll out a minor deferral -now-. This minor -will- affect trying to get to 12.6.1 / 12.6.2 but:
12.6.1 came out 50 days ago
Put out a minor less than 50 days and you will still see 12.6.1 on those devices right away, while still holding back 13.1 on the buggy versions since it just came out today.
2/n
These details are covered in https://support.apple.com/en-us/HT213471: Manage upgrading to macOS Ventura in your organization
which is linked from https://support.apple.com/en-us/HT213327: What's new for enterprise in macOS Ventura
@mikeymikey so happy we didn’t have anything blocking us this year from day one Ventura upgrades 
@mikeymikey *taps sign*
@mikeymikey Do you know this: Does an upgrade from let’s say 12.5 to 13.1 still require admin privileges? Most of my fleet are standard users, and the previous admin didn’t had a proper MDM to use (I‘m rolling that out now).
@schoeM https://support.apple.com/en-us/HT213327
See top bullet point.
OTA upgrades to Ventura - supported by 12.3 and later - are smaller upgrades than a full app
There is in fact NO app. The update applies -just- like a regular point release.
And as such - no admin is required (just like on regular minor point releases). A -passcode- may be required on Apple silicon (M1/M2) - but no admin required
@mikeymikey interesting, thank you. I haven’t considered the OTA-part. So…fingers crossed. Any problems from now on are good excuses to check get the computer in for service and re-enroll into the new MDM I guess.