Deploying a DDM OS Update Policy

Learn how to deploy a DDM OS update policy to both active and new devices in your organization using post-enrollment and pre-enrollment methods.

Overview

You can deploy the OS update policy immediately to devices that are already active in your environment or configure it for automatic application to new devices as they join your organization. Choose the deployment method that best fits your device management workflow.

Choosing a Deployment Method

Select the deployment method that aligns with your device management workflow:

  • Pre-Enrollment Staging: Ensures new devices are compliant with update policies from the moment they are onboarded.
  • Post-Enrollment Deployment: Best for updating policies on devices already managed by your system.

Pre-Enrollment Staging (New Devices)

Use this method to ensure that new devices receive update rules during their initial setup and onboarding process.
  1. Create or open a Policy Group (Apps → MCM → Policy Groups).
  2. Add your OS Update policy to the Policy Group.
  3. Assign the Policy Group to a Smart Group designated for new device onboarding, or set it as a platform default.
When a new device enrolls, BigFix applies the update rules immediately during the initial setup process.

Post-Enrollment Deployment (Active Devices)

Use this method to apply the policy to devices that are already enrolled in your management system.
  1. Open the policy from the Policies list.
  2. Click Deploy. Select the target Devices or Smart Groups.
  3. Click Deploy to confirm.
The selected devices will receive and apply the update policy automatically upon their next check-in.