🎯 Purpose
✅ Enforce the latest iOS/iPadOS update on all Apple mobile devices using Declarative Device Management (DDM).
➡️ Keeps devices current so they continue to meet the minimum OS version in E8‑COMPLY‑iOS/iPadOS. Uses the same structure as the macOS software update policy.
👥 Who is affected
✅ Devices: All supervised/managed iOS and iPadOS devices
🚫 Exclusions: None
☁️ What is protected
✅ Operating system: iOS and iPadOS
✅ Type: Settings catalog › Declarative Device Management › Software Update
🔐 How updates are enforced
Setting | Value |
Enforce Latest Software Update Version | True |
Delay In Days | 3 days after release |
Install Time | 20:00 (device local time) |
➡️ Users are notified of the update and it installs automatically at 20:00 once the 3‑day window has passed.
⚙️ What this policy does NOT enforce
🚫 A specific target OS version
🚫 Compliance blocking (handled by E8‑COMPLY‑iOS/iPadOS)
🚫 Rapid Security Response settings
🟢 Policy status
✅ Enabled
✅ Assigned to all devices
ℹ️ Note: This policy works alongside E8‑Patching‑iOS/iPadOS. DDM software update settings take precedence over legacy MDM update policies on supported devices.
📘 Essential Eight Alignment
✅ Supports Essential Eight – Patch Operating Systems by installing updates within days of release
ℹ️ Inforcer Best Practice control applied at all maturity levels
📘 Practical Interpretation (Executive‑Friendly)
This policy ensures that:
✅ iPhones and iPads update to the latest version within about 3 days
✅ Updates install in the evening to avoid disrupting work