Upgrade Macs to macOS Sonoma with Microsoft Intune

This guide walks you through upgrading your organization’s Macs to macOS Sonoma using Microsoft Intune. You’ll learn how to create a macOS platform upgrade policy, assign it to device groups, and monitor the upgrade progress—ensuring a smooth, managed rollout without manual intervention on each machine.

What You’ll Need

• Microsoft Intune admin access (Intune Administrator or Device Management role).
• Macs must be enrolled in Intune (via Company Portal or Apple Business Manager).
• Macs must meet Sonoma’s minimum hardware requirements (Mac models from 2018 or later, except some older models—verify on Apple’s support site).
• Sufficient free disk space on each Mac (at least 20 GB recommended).
• Backup of critical data (though the upgrade preserves user files, a backup is always good practice).

Step-by-Step

1. Sign in to Microsoft Intune admin center (intune.microsoft.com) with an account that has permissions to manage device configurations.
2. Go to Devices > macOS > Platform upgrade policies (if you don’t see this option, ensure you have the latest Intune UI update).
3. Click + Create policy.
4. Enter a Name (e.g., “macOS Sonoma Upgrade – Pilot”) and an optional Description.
5. Under Platform upgrade settings, select macOS Sonoma 14.x from the drop-down list. If you need a specific minor version, choose the appropriate one (e.g., 14.5).
6. Configure the Upgrade schedule:
   • Choose As soon as possible to start immediately after assignment, or
   • Select Schedule to set a specific date and time (useful for off-hours).
7. Click Next to go to the Assignments tab.
8. Add a device group (e.g., a pilot group first) under Assign to. You can filter by device or user groups, but device groups are recommended for upgrades.
9. Review your settings and click Create.
10. Once the policy is created, Intune will push the upgrade to the assigned Macs. The upgrade typically starts within a few hours, but you can force a sync by asking users to open Company Portal and click Check Status or by using the Sync action in Intune.
11. Monitor the progress in Intune by going to Devices > macOS > Platform upgrade policies and selecting your policy. The Device status tab shows each device’s state (e.g., “Upgrade in progress”, “Upgrade successful”, “Upgrade failed”).
12. After the upgrade completes, verify the macOS version on a few devices by going to Apple menu > About This Mac.

Common Mistakes

• Assigning to user groups instead of device groups – If a user has multiple Macs, the policy may apply to all of them, which might not be intended. Use device groups for precise targeting.
• Not checking hardware compatibility – Older Macs (pre-2018) will not support Sonoma and will fail the upgrade. Verify model compatibility before assigning.
• Insufficient disk space – The upgrade requires several GB of free space. If a Mac is nearly full, the upgrade will fail. Ensure at least 20 GB free, or use Intune’s disk space check (if available).
• Forgetting to set a maintenance window – If you schedule the upgrade during business hours, users may lose work. Always set a schedule that minimizes disruption.
• Not testing on a pilot group – Rolling out to all devices at once can cause widespread issues. Always test on a small group first.

Tips

• Use a staged rollout – Start with a pilot group, then expand to a broader ring, and finally to all devices. This allows you to catch issues early.
• Communicate with users – Send an email or notification explaining that a macOS upgrade is coming, and advise them to save work and keep their Mac plugged in.
• Check app compatibility – Before the upgrade, verify that critical business apps are compatible with Sonoma. You can use Intune’s managed apps or a compatibility list from your software vendors.
• Enable FileVault encryption – If you have FileVault enabled, the upgrade may require the user to enter their password to unlock the disk. Ensure users know this.
• Use the ‘Require user approval’ setting if needed – In some environments, you may want users to approve the upgrade. Intune allows you to require user approval, which gives them control over when to start.

Troubleshooting

If the upgrade fails or doesn’t start, try these steps:

• Check device status – In Intune, go to the policy’s device status tab. Look for error messages like “Device not eligible” or “Upgrade failed”.
• Force a sync – On the Mac, open Company Portal, go to Devices, select the Mac, and click Check Status. Alternatively, in Intune, select the device and click Sync.
• Verify network connectivity – The Mac must be able to reach Apple’s update servers. Check if the Mac can download updates manually (System Settings > General > Software Update).
• Check disk space – If the Mac has less than 20 GB free, the upgrade will fail. Free up space and retry.
• Restart the Mac – Sometimes a simple restart resolves stuck upgrade processes.
• Remove and re-assign the policy – If the policy seems stuck, delete the policy, recreate it, and assign again.
• Check Intune service health – Occasionally, Intune outages can delay policy delivery. Check the Microsoft 365 admin center for service health.

Frequently Asked Questions

Will the upgrade erase my Mac’s data?

No, the macOS upgrade preserves your files and settings. It’s an in-place upgrade, not a wipe. However, it’s always wise to have a backup.

Can I upgrade Macs that are not enrolled in Intune?

No, Intune can only manage devices that are enrolled. You need to enroll the Macs first via Company Portal or Automated Device Enrollment (ADE).

How long does the upgrade take?

It depends on your network speed and the Mac’s hardware. Typically, it takes 30-60 minutes to download and install, but it can be longer on slower connections.

What if a user is using the Mac when the upgrade starts?

If you schedule the upgrade, it will start at the specified time. If the user is active, they may see a prompt to save work. We recommend scheduling upgrades during off-hours to avoid disruption.

Can I roll back to the previous macOS version?

Intune does not provide a rollback feature. To revert, you would need to erase and reinstall the older macOS, which is time-consuming. That’s why testing is crucial.

Does Intune support upgrading to beta versions of macOS?

No, Intune only supports stable, released versions of macOS. Beta versions are not available in the policy settings.

Related

• Microsoft Edge Status Invalid Image Hash Error Fix
• How to Sell Payroll Services
• How to Choose a Cloud GPU Provider for AI Models