OS Update Policy for Devices Enrolled using Android Device Policy App

The OS Update Policy enables administrators to control how and when operating system updates are deployed to managed devices.

Prerequisites

• Devices should be running Android 6.0 or later.
• Devices must be enrolled using the Android Device Policy app and provisioned as Company-Owned.

Deploying OS Updates

Administrators can configure one of the following deployment options:

1. Immediately

• OS updates are deployed as soon as they become available.
• The device begins downloading and installing the update immediately.
• Recommended for critical or high-priority security updates.

2. During Maintenance Window

• OS updates are deployed only during a specified maintenance window.

Deployment Window

• Configure a specific time window during which updates can be installed.
• If multiple configurations exist (for example, an App Update Policy and an OS Update Policy with different maintenance windows), the device follows the Maintenance Window from the last applied policy.

Note: Deployment must complete within the defined time limit. If installation does not finish within the window, it will automatically resume during the next maintenance window.

3. Postpone Updates

• Allows administrators to delay automatic OS updates.
• Updates can be postponed for up to 30 days.
• Once the postponement period expires, the update will be enforced.

Note: Security updates may still be installed during the postponement period depending on device manufacturer behavior.

Update Freeze Periods

Freeze periods allow administrators to suspend OS updates temporarily. To gain greater control over when updates are applied, especially during holidays, vacations, or critical business periods, administrators can configure a Freeze Period. This completely suspends OS updates, preventing disruptions during important operational windows.

For example, in the education sector, freeze periods can be scheduled during exam seasons to ensure learning platforms and essential systems remain uninterrupted.

During a freeze period:

• Devices will not receive system update notifications.
• Security updates will not be installed.
• Users cannot manually install updates.

How to Configure a Freeze Period

1. Specify the Start and End Date: Set the dates to suspend OS updates. Ensure each freeze period does not exceed 90 days.
2. Add Multiple Freeze Periods: Use the (+) icon to configure additional periods. Ensure there is a minimum gap of 60 days between each freeze period.
3. Save and Distribute: Click Save to publish the policy, then select the policy and click Distribute Policy to apply it to a device group.

Points to Note

• Only one OS Update Policy can be active per device or group. Associating a new policy replaces any existing policy. If both device-level and group-level policies are applied, the device-level policy takes precedence.
• If an App Update scheduled window and an OS Update deployment window are configured for the same device, both updates share the same maintenance window behavior on Android devices.