Estado de Microsoft AutoUpdate en Mac
Reporta la versión de Microsoft AutoUpdate, el canal de actualización y la última vez que buscó actualizaciones, en una línea por Mac.
Ejemplo en México
Universidad privada en Puebla, 80 Mac en laboratorios
Algunos laboratorios quedaron en el canal Beta de Office por error.
check-msupdate-status.shEncuentra 9 Mac en canal Beta y las regresa a Current con una política.
Cómo implementarlo
- En el centro de administración de Microsoft Intune ve a Dispositivos > Por plataforma > macOS > Organizar dispositivos > Atributos personalizados para macOS (Custom attributes for macOS) > Agregar.
- Ponle nombre al perfil, elige el tipo de dato String y sube el archivo check-msupdate-status.sh.
- Asígnalo a un grupo piloto de Mac. Intune ejecuta el script cada 8 horas y reporta lo que imprime.
- Busca Macs con canal distinto al esperado o con "Last Update Check: Never" y corrige la política de MAU.
Ver el código completo de check-msupdate-status.sh
#!/bin/bash
# TITLE: Check Microsoft AutoUpdate Status
# SYNOPSIS: Checks the status of Microsoft AutoUpdate (MAU) on macOS devices
# DESCRIPTION: This script retrieves and displays the current status of Microsoft AutoUpdate (MAU),
# including the installed version, update channel configuration, and the timestamp
# of the last update check. The information is formatted for Intune custom attributes
# to provide visibility into the update configuration of Microsoft applications.
# TAGS: Monitoring,Updates
# PLATFORM: macOS
# MIN_OS_VERSION: 10.15
# AUTHOR: Ugur Koc
# VERSION: 1.0
# LASTUPDATE: 2025-06-04
# CHANGELOG:
# 1.0 - Initial release
#
# EXAMPLE:
# ./check-msupdate-status.sh
# Outputs MAU version, channel, and last update check time
#
# NOTES:
# - Requires Microsoft AutoUpdate to be installed on the device
# - Uses the msupdate CLI tool provided with MAU
# - Designed for Intune custom attributes (single line output)
# - Output format: MAU Version: X.X.X | Channel: ChannelName | Last Update Check: DateTime
# - For more scripts and guides, visit: IntuneMacAdmins.com
# ============================================================================
# VARIABLES AND INITIALIZATION
# ============================================================================
# Path to msupdate CLI
MSUPDATE="/Library/Application Support/Microsoft/MAU2.0/Microsoft AutoUpdate.app/Contents/MacOS/msupdate"
# ============================================================================
# FUNCTIONS
# ============================================================================
# Function to output result (for Intune custom attributes)
output_result() {
# For Intune custom attributes, output should be a single line
echo "$1"
exit 0
}
# Function to check if MAU is installed
check_mau_installed() {
if [[ ! -f "$MSUPDATE" ]]; then
output_result "Microsoft AutoUpdate not installed"
fi
}
# Function to check if msupdate is executable
check_msupdate_executable() {
if [[ ! -x "$MSUPDATE" ]]; then
output_result "Error: msupdate not executable"
fi
}
# ============================================================================
# MAIN SCRIPT LOGIC
# ============================================================================
main() {
# Check if MAU is installed
check_mau_installed
# Check if msupdate is executable
check_msupdate_executable
# Get the configuration output
local config_output
if ! config_output=$("$MSUPDATE" --config 2>/dev/null) || [[ -z "$config_output" ]]; then
output_result "Error: Unable to retrieve MAU configuration"
fi
# Extract MAU version
local mau_version
mau_version=$(echo "$config_output" | grep "AutoUpdateVersion =" | awk -F'"' '{print $2}')
if [[ -z "$mau_version" ]]; then
mau_version="Unknown"
fi
# Extract channel name
local channel_name
channel_name=$(echo "$config_output" | grep "ChannelName = " | head -n 1 | awk -F'=' '{print $2}' | sed 's/;//' | xargs)
if [[ -z "$channel_name" ]]; then
channel_name="Unknown"
fi
# Extract last update check time
local last_check
last_check=$(echo "$config_output" | grep "LastCheckForUpdates =" | awk -F'"' '{print $2}')
if [[ -z "$last_check" ]]; then
last_check="Never"
fi
# Format and output the result
output_result "MAU Version: $mau_version | Channel: $channel_name | Last Update Check: $last_check"
}
# ============================================================================
# ERROR HANDLING
# ============================================================================
# For Intune custom attributes - handle errors gracefully
trap 'output_result "Error: Script failed"' ERR
# ============================================================================
# SCRIPT EXECUTION
# ============================================================================
# Only run main if script is executed directly (not sourced)
if [[ "${BASH_SOURCE[0]}" == "${0}" ]]; then
main "$@"
fi
# Exit successfully (if not using output_result)
exit 0
# Copia sin cambios de https://github.com/ugurkocde/IntuneAutomation (commit 797bb2e).
# MIT License
#
# Copyright (c) 2025 Ugur Koc | Microsoft MVP
#
# Permission is hereby granted, free of charge, to any person obtaining a copy
# of this software and associated documentation files (the "Software"), to deal
# in the Software without restriction, including without limitation the rights
# to use, copy, modify, merge, publish, distribute, sublicense, and/or sell
# copies of the Software, and to permit persons to whom the Software is
# furnished to do so, subject to the following conditions:
#
# The above copyright notice and this permission notice shall be included in all
# copies or substantial portions of the Software.
#
# THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR
# IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,
# FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE
# AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER
# LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,
# OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE
# SOFTWARE.