How to Fix Issue on Intune DDM and iOS Update Visibility | Admin Alert for Deferral Failures

Key Takeaways:

• Visibility gap in Intune’s Device Detail Management
• Admins may not receive accurate signals when update deferrals don’t apply correctly
• Cause confusion in reporting and troubleshooting
• Possible workarounds of Intune DDM and iOS Update Visibility issue

Let’s discuss about How to Fix Issue on Intune DDM and iOS Update Visibility | Admin Alert for Deferral Failures. Intune Admin was configured Device Deployment Manager (DDM) policy to defer iOS updates for 7 days, then enforce installation after 10 days at 8 PM. The update is became visible instead of being hidden.

Table of Contents

Table of Contents

How to Fix Issue on Intune DDM and iOS Update Visibility | Admin Alert for Deferral Failures

One of the Intune admin recently configured a DDM policy for their iOS devices (around 10K). This policy configured to defer iOS updates for 7 days, then enforce installation after 10 days at 8 PM The admin noticed that, the deferral does not work as expected as the update becomes visible as soon as it’s released. This happened with the iOS 26.2.1, iOS 26.3 update.

Configuration Settings	True
Enforce Latest Update Version	True
Delay in Days	10
Install Time	20:0
Automatic Download	Always On
Automatic Install OS Updates	Always On
Automatic Install Security Update	Always On
Background Security Improvement Settings	Enable
Deferrals Combined Period in Days	7
Notifications	Enable

How to Fix Issue on Intune DDM and iOS Update Visibility | Admin Alert for Deferral Failures – Table.1

The following screenshot shows the Configuration settings of DDM Software Update – Enforce Latest”). Here you can configure Enforce latest software update version.

• Managing Default Messaging App Preferences on iOS Devices using Intune
• Microsoft Intune Issues with Rapid Security Response Version of iOS iPadOS and macOS Update
• Intune Company Portal Freeze Issue on iOS devices during sign in

Here the delays in Days are given as 7 and Install time is 20:00. This image shows exactly same as the Admin who raised the issue above.

Impact of this Issue

The deferral setting (7 days) is ignored, meaning the intended staggered rollout fails. And Auto-install settings may override deferrals, creating inconsistent behavior across devices.

Possible Workarounds

MS support think this issue occurred due to the Auto Install setting being Always On (for both iOS updates and Security updates). So the Auto Install Always On” option seems to override the deferral. You can try setting Auto Install Not Configured or Install Later so that the deferral period can take effect before enforcement.

• Admins Ensure that only one update policy applies per device to avoid conflicts

Need Further Assistance or Have Technical Questions?

Join the LinkedIn Page and Telegram group to get the step-by-step guides and news updates. Join our Meetup Page to participate in User group meetings. Also, Join the WhatsApp Community  and WhatsApp Channel to get the latest news on Microsoft Technologies. We are there on Reddit as well.

Author

Anoop C Nair has been Microsoft MVP for 10 consecutive years from 2015 onwards. He is a Workplace Solution Architect with more than 22+ years of experience in Workplace technologies. He is a Blogger, Speaker, and Local User Group Community leader. His primary focus is on Device Management technologies like SCCM and Intune. He writes about technologies like Intune, SCCM,  Windows,  Cloud PC,  Windows, Entra, Microsoft Security, Career, etc.