Deep Freeze Mac & Automatic updates for macOS

macOS systems running Deep Freeze should exercise caution when applying software updates to ensure that the updates are only applied to the computer while Deep Freeze is disabled. 

Configuration Profiles

Apple currently does not allow the software installer for Deep Freeze to automatically make changes to the operating system to stop the process of performing automatic software updates on systems running macOS. In order to make these changes Faronics provides two configuration profiles that can be installed on systems running Deep Freeze Mac as part of the installation package that customers download. 

  • DisableNotification.mobileconfig - This configuration profile will disable the notifications shown to users prompting for the install of Apple's software updates. 
  • Disable Auto Update.mobileconfig - This configuration profile will prevent standard users from being able to install software updates. 

These can be installed manually by double clicking the package and following the prompts to install them, or through a 3d party MDM platform that supports pushing configuration profiles to a device. 

Performing Automatic Updates 

At this time Apple does not provide a method to perform software updates without user consent without the use of a MDM platform, customers who are using a 3rd party MDM that supports macOS are recommended to configure their MDM to perform updates at the same time that a maintenance task is configured to turn Deep Freeze off automatically in the Deep Freeze configuration.