Configure Default Patch Policy Groups

Each default patch policy group contains preconfigured policies with names that align with their deployment rings. A deployment ring controls how and when an update is applied. 

These default patch policy groups can each contain up to three ready-to-use default deployment rings:

• Vanguard
• Early Adoption
• General Adoption
• Late Adoption

If you haven’t created any default OS patch policy groups yet, go to DEVICE MANAGEMENT > Policy Groups, expand Recommended policy groups, and click Load Default Policies & Policy Groups.

Understanding Deployment Ring Policy Defaults

Each OS has different sane default values.

MacOS
These are the preconfigured default values for the macOS default patch policies:

• Minor OS Update Installation Grace Period – The number of days that users have to install minor OS updates after they are available. The grace period will apply to any minor OS updates available on a device at the time of policy application. If minor updates are not installed at the end of the grace period, users will receive continuous update notifications until the updates have been installed. Valid values are 0-90 days, and the default is 30 days. 
• Defer Minor OS Updates – The number of days to defer the availability of future minor OS updates. Existing minor OS updates that are available to devices at the time of policy application will not respect this setting. For Deferral Days, specify how many days to defer a minor OS update after it’s released.

Windows
These are the preconfigured default values for the Windows default patch policies:

• Quality & Feature Update Deferrals – Specify how many days to defer the availability of future quality and feature OS updates.
• Quality & Feature Update Install Grace Period – The number of days before available quality and feature updates are installed on devices automatically
• Quality & Feature Update Commit and Restart Grace Period – After an update has been installed and is pending commitment, specify the grace period for when the update restarts occur automatically to commit the update. 

Ubuntu
JumpCloud does not support non-Long Term Support (LTS) Ubuntu versions. Zero day support of new LTS versions might be available, but is not guaranteed.

These are the preconfigured default values for the Linux (Ubuntu) default patch policies: