Skip to content

Count Deadlines

Kevin edited this page Oct 17, 2024 · 2 revisions

If there is no actively logged in user (the system is at the login window) then the super workflow automatically downloads and installs any macOS updates requiring a restart. Conversely, if a user is actively logged in and the super workflow has successfully downloaded an update that requires a restart, then the default behavior is to ask the user if they want to restart now or defer until later.

Count deadlines allow you to specify the maximum number of deferrals allowed. There are three types of count deadlines; focus, soft, and hard. You can set a focus count deadline along with a soft count deadline or a hard count deadline. In other words, you can not have both a soft count deadline and a hard count deadline at the same time.

Focus Count Deadline

The maximum number of automatic deferrals allowed if the system is in user-enabled Focus/Do Not Disturb or when a process has requested that the display not go to sleep (for example, during an active meeting). Once the focus count deadline has been met, the update restart dialogs always appear even if the user is in Focus/Do Not Disturb.

Command option example:
--deadline-count-focus=5

Command option disable example:
--deadline-count-focus=X

Configuration profile example:
<key>DeadlineCountFocus</key>
<string>5</string>

The --deadline-count-focus deadline count must be met before the --deadline-count-soft or --deadline-count-hard deadline counters are started. Also, other maximum days deadlines or date deadlines that have passed can override the focus count deadline.

You should also consider setting the --deferral-timer-focus option, otherwise the focus deferral timer is based on the default deferral timer.

When using test mode, you can simulate being past the maximum focus count deadline by specifying a value of "0":
--deadline-count-focus=0

Soft Count Deadline

The maximum number of user selected deferrals allowed before showing a soft deadline dialog. A soft deadline displays an interactive update restart dialog indicating that no more deferrals are allowed.

Command option example:
--deadline-count-soft=5

Command option disable example:
--deadline-count-soft=X

Configuration profile example:
<key>DeadlineCountSoft</key>
<string>5</string>

If you also use the --deadline-count-focus option then it's deadline count must be met before the --deadline-count-soft deadline counter is started. Also, the --deadline-count-soft option can not be used along with the --deadline-count-hard option as logically there can only be one behavior after the maximum number of user deferrals has been met. Finally, other maximum days deadlines or date deadlines that have passed can override the soft count deadline.

When using test mode, you can simulate being past the maximum soft count deadline by specifying a value of "0":
--deadline-count-soft=0

The count deadline update dialog

The count deadline update dialog

The soft count deadline dialog

The soft count deadline dialog

Hard Count Deadline

The maximum number of user selected deferrals allowed before the computer automatically restarts for updates without asking the user for approval. However, the user is notified that a restart is pending.

Command option example:
--deadline-count-hard=5

Command option disable example:
--deadline-count-hard=X

Configuration profile example:
<key>DeadlineCountHard</key>
<string>5</string>

If you also use the --deadline-count-focus option then it's deadline count must be met before the --deadline-count-hard deadline counter is started. Also, the --deadline-count-hard option can not be used along with the --deadline-count-soft option as logically there can only be one behavior after the maximum number of user deferrals has been met. Finally, other maximum days deadlines or date deadlines that have passed can override the hard count deadline.

When using test mode, you can simulate being past the maximum hard count deadline by specifying a value of "0":
--deadline-count-hard=0

The count deadline update dialog

The count deadline update dialog

The hard count deadline restart notification

The hard count deadline restart notification

Apple Silicon User Authentication

For computers with Apple silicon, saved local authentication or saved MDM authentication is required to enforce deadline workflows that target macOS updates or upgrades. Therefore, if you do not specify a saved authentication option, and the workflow target is a macOS updates or upgrade, then the user is prompted for their local password even if a soft or hard date deadline has passed.

The count deadline authentication dialog

The count deadline authentication dialog

Restart All Deadline Counters

Use this option to restart all active deadline counters, thus allowing for the maximum number of deferrals again. This option can not be set via a MDM configuration profile.

Command option example:
--deadline-count-restart-all

Delete All Count Deadlines

Delete all locally set count deadlines, thus returning to the default behavior of an unlimited number of deferrals.

Command option example:
--deadline-count-delete-all

This option can not be set via a MDM configuration profile. However, any other deadline options that are specified via a super MDM configuration profile remain in effect.

Clone this wiki locally