Tech Community Live: Endpoint Manager edition
Jul 21 2022, 08:00 AM - 12:00 PM (PDT)

Delaying visibility of software updates in Intune for supervised iOS devices

Published Feb 21 2019 02:04 PM 12K Views

This change is now coming with the April update instead of March

 

We shared in a previous post that we were moving a few settings around in the console. As part of this change, we’re disabling the “Delay Visibility of Software Updates” setting with the February service update and removing it from the iOS update policy blade towards the end of March April. We aim to help resolve confusion around this setting and software update policies which are configured to push updates to devices. This will not change the way your scheduled software updates apply but it may affect how long the visibility of this update is delayed for end users.

 

After the February update to Intune and until the March April update rolls out, the Delay visibility setting will appear both in Device restriction profiles in the console and in Update policies for iOS in the Software update blade. During this time, here’s what you’ll have to do -

 

For existing Update policies for iOS: If you have custom configured this setting to anything other than the default 30 days, and want your existing configurations for the Delay visibility setting to continue to apply after the end of April March, you’ll have to create a new iOS device restriction profile. This will need to have the same values as in the existing Software update policy and be targeted to the same groups. If this setting has the default value of 30 days and you want that to apply after April March, you will still need to reconfigure the setting in it's new location to 30 days. After the April March service update, this setting will not show up in existing Software update policies you will no longer be able to edit values there.

 

Note: If the value for number of days you can delay visibility does not match in both locations, the Delay Visibility setting will not work, and end users will see the update on their devices as soon as it is available. So if this is configured as 20 days in one spot and 25 days in the new location, the setting will not apply at all. End users will see a notification on their device as soon as an iOS update is available.

 

This may have minimal impact for most customers since the Software Update Policy has always taken precedence over this setting in the console.

 

For new update policies for iOS: If you try to create new policies in the Software updates blade after the Intune February service update, you will see this setting grayed out. You’ll see a note in the console as shown in the preview screenshot redirecting you to the Device configuration blade to delay visibility of updates.

 

Anya 1.jpg

 

If you wish to delay visibility of software updates to your end users, start configuring it in new profiles in the Device Configuration blade. To do this, in the Intune blade, go to Device Configuration > Create policy > Device restrictions > General. Here you can configure the setting as per your requirements. Note that the setting will be "Not Configured" by default. Here's what the blade will look like after the setting moves - 

 Anya 2.png

 

We’ll keep this post updated with more information!

 

2/22/19: Updated with minor clarification

3/29/19 : Updated to say change is coming with the April update

4 Comments
%3CLINGO-SUB%20id%3D%22lingo-sub-345753%22%20slang%3D%22en-US%22%3EDelaying%20visibility%20of%20software%20updates%20in%20Intune%20for%20supervised%20iOS%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-345753%22%20slang%3D%22en-US%22%3E%3CP%3EThis%20change%20is%20now%20coming%20with%20the%20April%20update%20instead%20of%20March%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWe%20shared%20in%20a%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2FIntune-Customer-Success%2FSupport-Tip-Multiple-configuration-settings-moving-for-Intune%2Fba-p%2F305881%22%20target%3D%22_blank%22%3Eprevious%20post%3C%2FA%3E%20that%20we%20were%20moving%20a%20few%20settings%20around%20in%20the%20console.%20As%20part%20of%20this%20change%2C%20we%E2%80%99re%20disabling%20the%20%E2%80%9CDelay%20Visibility%20of%20Software%20Updates%E2%80%9D%20setting%20with%20the%20February%20service%20update%20and%20removing%20it%20from%20the%20iOS%20update%20policy%20blade%20towards%20the%20end%20of%20%3CSTRIKE%3EMarch%3C%2FSTRIKE%3E%20April.%20We%20aim%20to%20help%20resolve%20confusion%20around%20this%20setting%20and%20software%20update%20policies%20which%20are%20configured%20to%20push%20updates%20to%20devices.%20This%20will%20not%20change%20the%20way%20your%20scheduled%20software%20updates%20apply%20but%20it%20may%20affect%20how%20long%20the%20visibility%20of%20this%20update%20is%20delayed%20for%20end%20users.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAfter%20the%20February%20update%20to%20Intune%20and%20until%20the%20%3CSTRIKE%3EMarch%3C%2FSTRIKE%3E%20April%20update%20rolls%20out%2C%20the%20Delay%20visibility%20setting%20will%20appear%3CSTRONG%3E%20both%3C%2FSTRONG%3E%20in%20%3CSTRONG%3EDevice%20restriction%20profiles%3C%2FSTRONG%3E%20in%20the%20console%20and%20in%20%3CSTRONG%3EUpdate%20policies%20for%20iOS%3C%2FSTRONG%3E%20in%20the%20Software%20update%20blade.%20During%20this%20time%2C%20here%E2%80%99s%20what%20you%E2%80%99ll%20have%20to%20do%20-%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EFor%20existing%20Update%20policies%20for%20iOS%3C%2FSTRONG%3E%3A%20If%20you%20have%20custom%20configured%20this%20setting%20to%20anything%20other%20than%20the%20default%2030%20days%2C%20and%20want%20your%20existing%20configurations%20for%20the%20Delay%20visibility%20setting%20to%20continue%20to%20apply%20after%20the%20end%20of%20April%20%3CSTRIKE%3EMarch%3C%2FSTRIKE%3E%2C%20you%E2%80%99ll%20have%20to%20create%20a%20new%20iOS%20device%20restriction%20profile.%20This%20will%20need%20to%20have%20the%20same%20values%20as%20in%20the%20existing%20Software%20update%20policy%20and%20be%20targeted%20to%20the%20same%20groups.%20If%20this%20setting%20has%20the%20default%20value%20of%2030%20days%20and%20you%20want%20that%20to%20apply%20after%20April%20%3CSTRIKE%3EMarch%3C%2FSTRIKE%3E%2C%20you%20will%20still%20need%20to%20reconfigure%20the%20setting%20in%20it's%20new%20location%20to%2030%20days.%20After%20the%20April%20%3CSTRIKE%3EMarch%3C%2FSTRIKE%3E%20service%20update%2C%20this%20setting%20will%20not%20show%20up%20in%20existing%20Software%20update%20policies%26nbsp%3B%3CSPAN%20style%3D%22display%3A%20inline%20!important%3B%20float%3A%20none%3B%20background-color%3A%20%23ffffff%3B%20color%3A%20%23333333%3B%20cursor%3A%20text%3B%20font-family%3A%20inherit%3B%20font-size%3A%2016px%3B%20font-style%3A%20normal%3B%20font-variant%3A%20normal%3B%20font-weight%3A%20300%3B%20letter-spacing%3A%20normal%3B%20line-height%3A%201.7142%3B%20orphans%3A%202%3B%20text-align%3A%20left%3B%20text-decoration%3A%20none%3B%20text-indent%3A%200px%3B%20text-transform%3A%20none%3B%20-webkit-text-stroke-width%3A%200px%3B%20white-space%3A%20normal%3B%20word-spacing%3A%200px%3B%22%3Eyou%20will%20no%20longer%20be%20able%20to%20edit%20values%20there.%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CEM%3ENote%3A%20If%20the%20value%20for%20number%20of%20days%20you%20can%20delay%20visibility%20does%20not%20match%20in%20both%20locations%2C%20the%20Delay%20Visibility%20setting%20will%20not%20work%2C%20and%20end%20users%20will%20see%20the%20update%20on%20their%20devices%20as%20soon%20as%20it%20is%20available.%20So%20if%20this%20is%20configured%20as%2020%20days%20in%20one%20spot%20and%2025%20days%20in%20the%20new%20location%2C%20the%20setting%20will%20not%20apply%20at%20all.%20End%20users%20will%20see%20a%20notification%20on%20their%20device%20as%20soon%20as%20an%20iOS%20update%20is%20available.%20%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CEM%3EThis%20may%20have%20minimal%20impact%20for%20most%20customers%20since%20the%20Software%20Update%20Policy%20has%20always%20taken%20precedence%20over%20this%20setting%20in%20the%20console.%20%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3EFor%20new%20update%20policies%20for%20iOS%3C%2FSTRONG%3E%3A%20If%20you%20try%20to%20create%20new%20policies%20in%20the%20Software%20updates%20blade%20after%20the%20Intune%20February%20service%20update%2C%20you%20will%20see%20this%20setting%20grayed%20out.%20You%E2%80%99ll%20see%20a%20note%20in%20the%20console%20as%20shown%20in%20the%20preview%20screenshot%20redirecting%20you%20to%20the%20Device%20configuration%20blade%20to%20delay%20visibility%20of%20updates.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20887px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F78859iB76A766E02252E7D%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Anya%201.jpg%22%20title%3D%22Anya%201.jpg%22%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIf%20you%20wish%20to%20delay%20visibility%20of%20software%20updates%20to%20your%20end%20users%2C%20start%20configuring%20it%20in%20new%20profiles%20in%20the%20Device%20Configuration%20blade.%20To%20do%20this%2C%20in%20the%20Intune%20blade%2C%20go%20to%20Device%20Configuration%20%26gt%3B%20Create%20policy%20%26gt%3B%20Device%20restrictions%20%26gt%3B%20General.%20Here%20you%20can%20configure%20the%20setting%20as%20per%20your%20requirements.%20Note%20that%20the%20setting%20will%20be%20%22Not%20Configured%22%20by%20default.%20Here's%20what%20the%20blade%20will%20look%20like%20after%20the%20setting%20moves%20-%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSTRONG%3E%26nbsp%3B%3CSPAN%20class%3D%22lia-inline-image-display-wrapper%20lia-image-align-inline%22%20style%3D%22width%3A%20999px%3B%22%3E%3CIMG%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Ft5%2Fimage%2Fserverpage%2Fimage-id%2F78872iC3765E91D5D2B7C8%2Fimage-size%2Flarge%3Fv%3D1.0%26amp%3Bpx%3D999%22%20alt%3D%22Anya%202.png%22%20title%3D%22Anya%202.png%22%20%2F%3E%3C%2FSPAN%3E%3C%2FSTRONG%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWe%E2%80%99ll%20keep%20this%20post%20updated%20with%20more%20information!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E2%2F22%2F19%3A%20Updated%20with%20minor%20clarification%3C%2FP%3E%0A%3CP%3E3%2F29%2F19%20%3A%20Updated%20to%20say%20change%20is%20coming%20with%20the%20April%20update%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-355319%22%20slang%3D%22en-US%22%3ERe%3A%20Delaying%20visibility%20of%20software%20updates%20in%20Intune%20for%20supervised%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-355319%22%20slang%3D%22en-US%22%3E%3CP%3Eawesome%20stuff%2C%20feature%20parity%20day%20by%20day.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-435112%22%20slang%3D%22en-US%22%3ERe%3A%20Delaying%20visibility%20of%20software%20updates%20in%20Intune%20for%20supervised%20iOS%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-435112%22%20slang%3D%22en-US%22%3E%3CP%3EFantastic%20stuff!%20Tested%20and%20deployed%20to%20all%20of%20our%20devices.%20Only%20thing%20that%20needs%20some%20clarifying%20though%2C%20how%20do%20I%20enable%20%22Automatic%20Updates%22%20on%20our%20supervised%20devices%3F%20Should%20I%20still%20keep%20an%20Update%20policy%20in%20place%20or%3F%20Seems%20to%20me%20there%20is%20no%20setting%20in%20the%20Restriction%20policy%3F%20Or%20am%20I%20missing%20something%3F%3C%2FP%3E%3CP%3EOr%20should%20I%20just%20setup%20an%20unconfigured%20Update%20Policy%2C%20as%20I%20don't%20want%20to%20prevent%20anything%20-%20we%20just%20want%20to%20hide%20updates%20for%20a%20month%2C%20and%20afterwards%20it%20should%20install%20asap.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EBtw%20%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F318315%22%20target%3D%22_blank%22%3E%40aleksandrP%3C%2FA%3E%20from%20the%20article%20here%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fsoftware-updates-ios%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3Ehttps%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fintune%2Fsoftware-updates-ios%3C%2FA%3E%20There's%20a%20note%20saying%3C%2FP%3E%3CBLOCKQUOTE%3E%3CP%3E%26nbsp%3B%22Apple%20MDM%20doesn't%20allow%20you%20to%20force%20a%20device%20to%20install%20updates%20by%20a%20certain%20time%20or%20date.%22%3C%2FP%3E%3C%2FBLOCKQUOTE%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-424489%22%20slang%3D%22en-US%22%3ERe%3A%20Delaying%20visibility%20of%20software%20updates%20in%20Intune%20for%20supervised%20iOS%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-424489%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3Eit's%20still%20not%20clear%20on%20which%20time%20you%20can%20postponed%20updates%20installation%20on%20the%20device%20level.%3C%2FP%3E%3CP%3EWe%20can%20postpone%20the%20visibility%20of%20new%20updates%20for%20user%20till%2090%20days%2C%20we%20can%20set%20up%20prevent%20frame%20for%20device%2C%20but%20where%20to%20set%20up%20for%20device%20the%20software%20delay%20installation%20and%20then%20install%20it%20in%20schedule%20time%3F%3C%2FP%3E%3CP%3EE.g.%20I%20have%20nonuser%20affinity%20device%20and%20want%20to%20postpone%20new%20iOS%20installation%20on%2050%20days%20and%20when%20run%20it%20on%20Sunday%20at%2011.00%2C%20how%20to%20do%20it%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F319178%22%20target%3D%22_blank%22%3E%40teh_pianist%3C%2FA%3E%26nbsp%3B%40%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F226779%22%20target%3D%22_blank%22%3E%40Intune%20Support%20Team%3C%2FA%3E%20how%20the%20delay%20visibility%20to%20end%20user%20of%20new%20update%20correlates%20with%20%3CSTRONG%3E%3CFONT%20face%3D%22Segoe%20UI%22%3ESelect%20times%20to%20prevent%20update%20installations%3C%2FFONT%3E%3C%2FSTRONG%3E%3CSPAN%3E%20which%20applies%20on%20device%20level%20and%20restricts%20time%20frame%20when%20updates%20aren't%20forcibly%20installed%20to%20device%3F%3C%2FSPAN%3E%3C%2FP%3E%3CP%3E%3CSPAN%3EHence%20If%20I%20set%20restriction%20on%20%3CSPAN%3EMonday%2012%20am%20-%208%20pm%20and%20Apple%20will%20publish%20update%20on%20Monday%20at%201%20pm%20does%20it%20mean%20I%20receive%20update%20immediately%20after%208%20PM%20and%20the%20system%20update%20will%20ignore%20%3CSTRONG%3EDelay%20visibility%20of%20software%20updates%20to%20end%20users%20%3C%2FSTRONG%3Esetting%3F%3C%2FSPAN%3E%3CBR%20%2F%3E%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-481998%22%20slang%3D%22en-US%22%3ERe%3A%20Delaying%20visibility%20of%20software%20updates%20in%20Intune%20for%20supervised%20iOS%20devices%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-481998%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F318315%22%20target%3D%22_blank%22%3E%40aleksandrP%3C%2FA%3E%26nbsp%3BHi.%20The%20best%20way%20to%20do%20this%20today%20is%20to%20target%20a%20Device%20Configuration%20policy%20to%20postpone%20new%20iOS%20updates%20for%2050%2B%20days%20and%20deploy%20a%20Software%20Update%20policy%20to%20the%20device%20once%20you%20would%20like%20the%20device%20to%20update.%20After%20the%20policy%20is%20deployed%2C%20the%20device%20will%20receive%20a%20command%20the%20next%20time%20it%20checks%20in%20with%20the%20Intune%20service%20as%20long%20as%20that%20time%20window%20is%20not%20selected%20to%20be%20prevented%20in%20the%20Software%20Update%20policy.%20The%20Software%20Update%20policy%20will%20override%20the%20Device%20Configuration%20policy%2C%20so%20no%20changes%20to%20that%20policy%20on%20day%2050%20are%20required.%3CBR%20%2F%3E%3CBR%20%2F%3ERegarding%20the%20second%20question%2C%20after%208pm%2C%20upon%20the%20next%20check%20in%20to%20the%20service%2C%20the%20service%20will%20determine%20if%20the%20current%20time%20is%20outside%20of%20the%20times%20to%20prevent%20update%20installations.%20If%20so%2C%20it%20will%20push%20a%20command%20to%20update%20the%20OS%20to%20the%20device.%20Because%20check-ins%20only%20happen%20every%20few%20hours%2C%20we%20recommend%20keeping%20a%2012%2B%20hour%20time%20frame%20that%20updates%20are%20not%20restricted%20in%20the%20policy.%20The%20Software%20Update%20policy%20overrides%20the%20Delay%20visibility%20of%20software%20updates%20setting%2C%20so%20that%20you%20can%20push%20updates%20at%20a%20time%20that%20is%20appropriate%20for%20your%20organization.%20I%20hope%20this%20helps!%20Thank%20you.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F319178%22%20target%3D%22_blank%22%3E%40teh_pianist%3C%2FA%3E%26nbsp%3BHi%2C%20thank%20you!%20There%20is%20no%20device%20restriction%20to%20force%20automatic%20updates.%20If%20there%20is%20an%20update%20available%2C%20it%20will%20be%20pushed%20down%20to%20the%20device%20naturally%20after%20the%20days%20set%20for%20the%20delayed%20visibility%20of%20software%20updates%20run%20out.%20Pushing%20down%20a%20software%20update%20policy%20overrides%20the%20device%20restriction%20for%20delaying%20the%20visibility%20of%20the%20updates%2C%20so%20if%20you%20configure%20a%20software%20updates%20policy%20during%20the%2030%20days%20you%20want%20to%20delay%20the%20visibility%20of%20updates%2C%20the%20devices%20will%20update%20when%20they%20sync.%20Forced%20software%20updates%20install%20(if%20available)%20when%20the%20device%20syncs%20with%20the%20Company%20Portal.%20Please%20let%20me%20know%20if%20there%20is%20anything%20else.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Version history
Last update:
‎Mar 29 2019 12:27 PM
Updated by: