Days Deadlines
If there is no actively logged in user (the system is at the login window) then the super workflow automatically downloads and installs any macOS updates requiring a restart. Conversely, if a user is actively logged in and the super workflow has successfully downloaded an update that requires a restart, then the default behavior is to ask the user if they want to restart now or defer until later.
Days deadlines allow you to specify the maximum number of days after that the user is allowed to defer after the "zero day". As a default, the zero day is automatically set but it can be overridden via the --workflow-zero-date-manual option. You can set multiple days deadlines with one of each type; focus, soft, and hard.
Also, because the day deadline options do not specify a time of day for the deadline, the --schedule-workflow-active option can be used to ensure the deadline falls within your specified times.
The maximum number of days that automatic deferrals are allowed if the system is in user-enabled Focus/Do Not Disturb or when a process has requested that the display not go to sleep (for example, during an active meeting). After the focus days deadline has passed, the update restart dialogs always appear even if the user is in Focus/Do Not Disturb.
Command option example:
--deadline-days-focus=3
Command option disable example:
--deadline-days-focus=X
Configuration Profile Example:
<key>DeadlineDaysFocus</key>
<string>3</string>
When used along with the --deadline-days-soft or --deadline-days-hard options, logically the --deadline-days-focus value must always be the least number of days. Also, other maximum count deadlines or date deadlines that have passed can override the focus days deadline.
You should also consider setting the --deferral-timer-focus option, otherwise the focus deferral timer is based on the default deferral timer.
When using test mode, you can simulate being past the maximum focus days deadline by specifying a value of "0":
--deadline-days-focus=0
The maximum number of deferral days allowed before showing a soft deadline dialog. A soft deadline displays an interactive update restart dialog indicating that no more deferrals are allowed.
Command option example:
--deadline-days-soft=5
Command option disable example:
--deadline-days-soft=X
Configuration Profile Example:
<key>DeadlineDaysSoft</key>
<string>5</string>
When used along with the --deadline-days-focus or --deadline-days-hard options, logically the --deadline-days-soft value must always be more than the --deadline-days-focus value and less than the --deadline-days-hard value. Also, other maximum count deadlines or date deadlines that have passed can override the soft days deadline.
When using test mode, you can simulate being past the maximum soft days deadline by specifying a value of "0":
--deadline-days-soft=0
The days/date deadline update dialog
The soft days/date deadline dialog
The maximum number of days allowed before before the computer automatically restarts for updates without asking the user for approval. However, the user is notified that a restart is pending.
Command option example:
--deadline-days-hard=7
Command option disable example:
--deadline-days-hard=X
Configuration Profile Example:
<key>DeadlineDaysHard</key>
<string>7</string>
When used along with the --deadline-days-focus or --deadline-days-soft options, logically the --deadline-days-hard value must always be the most number of days. Also, other maximum count deadlines or date deadlines that have passed can override the soft days deadline.
When using test mode, you can simulate being past the maximum hard days deadline by specifying a value of "0":
--deadline-days-hard=0
The days/date deadline update dialog
The hard days/date deadline restart notification
For computers with Apple silicon, saved local authentication or saved MDM authentication is required to enforce deadline workflows that target macOS updates or upgrades. Therefore, if you do not specify a saved authentication option, and the workflow target is a macOS updates or upgrade, then the user is prompted for their local password even if a soft or hard date deadline has passed.
The days/date deadline authentication dialog
Use this option to restart the automatically selected zero day date and time, thus allowing for the maximum number of days allowed for deferral again.
Command option example:
--deadline-days-restart-all
This option can not be set via a MDM configuration profile. However, if you also use the manual --workflow-zero-date-manual option to override the automatically selected zero day, this also overrides the restart days deadlines option.
Delete all locally set maximum days deadlines, thus returning to the default of an unlimited number of days allowed for deferrals.
Command option example:
--deadline-days-delete-all
This option can not be set via a MDM configuration profile. However, any other deadline options that are specified via a super MDM configuration profile remain in effect.