Managing macOS updates with Microsoft Intune requires a balance between security and control over major operating system upgrades. This article explains how to use Apple’s Declarative Device Management (DDM), a global 90-day major-upgrade deferral, update rings and specific-version enforcement to deploy approved macOS releases. It also covers how Nudge can improve the user experience.