Should I use DDM or Legacy for OS Update Management?
Choose based on the OS version of the managed devices. For devices running a supported version, use OS Update Management (DDM). In a template, you can configure forced updates that specify the OS version to apply and a deadline, as well as update restrictions.
| Target OS | OS Update Management (DDM) | OS Update Management (Legacy) |
|---|---|---|
| iOS / iPadOS | Available on 17 and later | Available up to 26 |
| macOS | Available on 14 and later | ― (no setting available) |
| tvOS | Available on 18.4 and later | Available up to 26 |
If the managed devices run a mix of OS versions, you can define both settings in the same template. The setting that is applied switches automatically according to the OS version of each device.
On devices running an OS version that supports DDM, the update command of OS Update Management (Legacy) does not work.
Note that OS Update Management (Legacy) specifies the time window (start / end) in which the update command is sent, whereas DDM specifies a deadline for applying the update (a single date and time).
Update deferral, Rapid Security Response restrictions, and the update path can also be configured in the profile's Restrictions payload / OS Update payload. If a setting exists in both DDM and the profile, the DDM setting takes precedence.
Last updated: July 29, 2026