[jeffbee]

Just think about the overall platform. How does MacOS update? It interrupts the user with demands, requires an administrator's password under some circumstances, and takes 20-30 minutes. Now consider how ChromeOS updates: silently and instantly.

[jungturk]

When deployed as a managed device, the OS updates overnight while there's no active user session.

[jeffbee]

I wonder why no enterprise where I've worked is aware of this fact, including technically sophisticated ones from Dropbox to Goldman Sachs. When I asked my favorite LLM whether Jamf Pro—which I should stress does not come in the box with MacOS—is capable of this level of zero-touch OS updates, it responded affirmatively then spent 95% of the rest of the response telling me about well-known workarounds for when such updates hang.

[jungturk]

Because a technically-sophisticated enterprise generally wouldn't pick Jamf unless they were an exclusive Apple house - they'd consider something like VMware's Workspace One (now Omnissa) that works across windows, mac, and linux.

And no need to ask an LLM - we can read the doc and notice there are 6 different deployment methods that work (out of the box) for the built-in MacOS MDM, several of which allow transparent, mandatory updates to user environments without requiring user interaction.

https://docs.omnissa.com/bundle/macOS-Device-ManagementVSaaS...