iOS Updates Best PracticeSolved

Hey @nizzy,

Thanks for reaching out!

Managing iOS updates can be tricky, but here are a couple of ways to streamline the process while ensuring compliance:

1. 1. Using Password Policy:
      If you have a Password policy associated with the device, you can force the update by clearing the passcode. After the update, the user will be prompted to create a new passcode based on the policy settings. This ensures that the update is enforced while maintaining security.  Even if they ignore it at first, after the grace period (up to an hour) allowed by iOS, they will be forced to set a new passcode in order to use the device.
   2. Send Broadcast Messages as a Reminder:
      You can use the Broadcast Message remote action in Hexnode UEM to send update reminders directly to users.

Let me know if you’d like more details on any of these approaches!

Best regards,
Eden Pierce
Hexnode UEM

Edenpierce,

Thank you for that response, so im pleased to report that Send Broadcast Messages is one of the tools ive been regularly using and is the main one that gets most of the users to go through with the update.

We also currently use a password policy, I was just a little wary of forcing the update and thus removing the password short term if they didnt have the device on their person it potentially created a risk of exposure of data on the device.

To update on something I am going to try as well, I have created a Dynamic Group as below:

I have then associated a Policy with that which basically puts the device into Kiosk mode so they can only use Settings, Phone & Messages until the update is done, once the update is done it removes from the Dynamic Group and returns back to full functionality.

I’ll let you know how that goes.

Hi @nizzy,

That sounds like a solid approach!

We tested the same, and it worked as expected. However, we recommend trying it in a test environment before deploying it in bulk.

Let us know how it turns out! Feel free to reach out if you have any questions.

Best regards,
Ben Clarke
Hexnode UEM

Ben,

Yeh I have it set to specific serial numbers at the moment so that I can single out users while testing I just didnt want to show that in the screenshot I submitted as thats not how it will work once we pass testing 🙂

Regards

Kevin