Configure Default Patch Policy Groups

Each default patch policy group contains preconfigured policies with names that align with their deployment rings. A deployment ring controls how and when an update is applied. 

These default patch policy groups can each contain up to three ready-to-use default deployment rings:

• Vanguard
• Early Adoption
• General Adoption
• Late Adoption

If you haven’t created any default OS patch policy groups yet, go to Device Management > Policy Groups, expand Recommended policy groups, and click Load Default Policies & Policy Groups.

Understanding Deployment Ring Policy Defaults

Each OS has different sane default values.

macOS
These are the preconfigured default values for the macOS default patch policies:

• Defer Major OS Upgrades - The number of days to defer the availability of future major OS updates. If an upgrade is already visible but falls within your defined deferral period, applying this policy will hide the update from the user until the deferral period expires. For Deferral Days, specify how many days to defer a major OS update after it’s released.
• Defer Minor OS Updates - The number of days to defer the availability of future minor OS updates. If an update is already visible but falls within your defined deferral period, applying this policy will hide the update from the user until the deferral period expires. For Deferral Days, specify how many days to defer a minor OS update after it’s released.
• Defer System or Non-OS Updates - The number of days to defer the availability of future non-OS updates, for example Safari updates or Xcode Command Line Tools updates. For Deferral Days, specify how many days to defer a system or non-OS update after it’s released.
• Enforce Automatic Updates and Installation Grace Period - The number of days that users have to install OS updates after they are available. The grace period will apply to any OS updates available on a device at the time of policy application. If updates are not installed at the end of the grace period, users are forced to run updates. Valid values are 0-90 days, and the default is 30 days. 

iOS

These are the preconfigured default values for the iOS default patch policies:

• Defer Major OS Upgrades or Minor OS Updates - The number of days to defer the availability of future major OS upgrades and minor OS updates. If an update is already visible but falls within your defined deferral period, applying this policy will hide the update from the user until the deferral period expires. For Deferral Days, specify how many days to defer a major OS update after it’s released.
• Enforce Automatic Updates and Installation Grace Period - The number of days that users have to install OS updates after they are available. The grace period will apply to any OS updates available on a device at the time of policy application. If updates are not installed at the end of the grace period, users are forced to run updates. Valid values are 0-90 days, and the default is 30 days. 

Windows
These are the preconfigured default values for the Windows default patch policies:

• Quality & Feature Update Deferrals - Specify how many days to defer the availability of future quality and feature OS updates.
• Quality & Feature Update Install Grace Period - The number of days before available quality and feature updates are installed on devices automatically
• Quality & Feature Update Commit and Restart Grace Period - After an update has been installed and is pending commitment, specify the grace period for when the update restarts occur automatically to commit the update. 

Ubuntu
JumpCloud does not support non-Long Term Support (LTS) Ubuntu versions. Zero day support of new LTS versions might be available, but is not guaranteed.

These are the preconfigured default values for the Linux (Ubuntu) default patch policies: