Carnegie Mellon University School of Computer Science

SCS Computing Facilities macOS and Windows Update Policy

This page describes the update policy we apply to our managed computers running macOS and Windows.  For managed Linux computers see this page.

macOS Update Policy

We apply the following update settings once a month to macOS users' Macs:

  • Download minor version updates.
  • Download and install app updates from the App Store.
  • Install Security Responses and system files
  • 3 user deferrals to delay update installation as needed.

As of late 2024 we have migrated to a new update system that prompts the user for minor update installation with a deferral option in case the user is busy.

sequoia-managed-updated-dialog

Windows Update Policy

We apply the following update settings to Windows applies to users' computers:

  • Microsoft Update enabled for updates to other Microsoft products and drivers.
  • Quality updates(monthly) are held back for 5 days from general availability, typically patch Tuesday.
  • Feature updates(typically annually) are held back for 120 days from general availability.
  • A deadline for quality update installation is 21 days after availability with 7 day grace period to reboot at users' convenience.
  • A deadline for feature update installation is 30 days after availability with a 7 day grace period to reboot at users' convenience.

Schedule a reboot

Step 1: Click the Windows Update icon in System Tray that appears after automatic installation.

1-win11updates-systray

 
Step 2: Select 'Restart Now' or 'Schedule restart'

2-win11updates-scheduled

 
Step 3: Schedule the restart

3-win11updates-chose-time