1. Sign out and close the Workplace app. 2. After you attempt to fix the issue, restart your computer.
3. Sign in to Workplace and wait for the compliance checks to finish processing. 3. Contact your internal IT department directly if you are unable to troubleshoot the issue using the directions listed below.
The Operating System Auto-Update Disabled failed compliance check indicates the operating system’s automatic update feature is disabled and not configured properly to keep the computer up to date.
To resolve this issue, ensure the operating system’s automatic update feature is enabled.
Unmanaged Workstations
The following instructions are for devices not maintained or managed by a third-party service provider.
Windows 10
To enable Operating System’s automatic update for Windows 10:
- Right-click on your Start button to open the WinX Menu.
- Select Run.
- Type services.msc and click OK to open the Services Manager.
- Verify Windows Update and Windows Update Medic Service services are running in the Services Manager.
- If the services are disabled, right-click on the service name and select Start.
- If the services are disabled, right-click on the service name and select Start.
Additionally, the following settings are recommended:
- Click the Start button and then click the settings icon.
- Click Updates and Security.
- Click Windows Update or click here.
- Click Advanced options.
- Verify the following options are enabled:
- Give me updates for other Microsoft products when I update Windows.
- Automatically download updates.
- Show a notification when your PC requires a restart to finish updating.
Windows 8.1
- Open Windows Update by swiping in from the right edge of the screen (or, if you're using a mouse, pointing to the lower-right corner of the screen and moving the mouse pointer up), select Settings > Change PC settings > Update and recovery > Windows Update or click here.
- Select Choose how updates get installed.
- Under Important updates, select Install updates automatically (recommended).
- Under Recommended updates, select Give me recommended updates the same way I receive important updates.
- Under Microsoft Update, select Give me updates for other Microsoft products when I update Windows.
- Click OK/Apply.
macOS (Mojave 10.14 and Catalina 10.15)
To enable Operating System’s automatic update for macOS:
- Launch System Preferences or click here.
- Click Software Updates.
- Click Advanced.
- Verify the following options are enabled:
- Check for updates.
- Download new updates when available.
- Install macOS updates.
- Install system data files and security updates.
macOS (High Sierra 10.13)
- Launch System Preferences or click here.
- Click App Store.
- Click Automatically check for updates.
- Verify the following options are enabled:
- Download newly available updates in the background.
- Install macOS updates.
- Install system data files and security updates.
Managed Workstations (Windows Only)
The following instructions are for devices maintained/managed by a third-party service provider.
Service providers can indicate that Microsoft updates are managed by a tool other than the native auto-update service. Frontline will require the following mandatory registry fields to be populated in HKEY_LOCAL_MACHINE\SOFTWARE\AgencyUpdate:
- ManagedBy: The name of the service provider.
- RMMTool: Identify the remote management tool used to manage the device.
- ManagedBySupportEmail: Service provider's email contact
- ManagedBySupportPhone: Service provider's phone contact
Even after updating the registry keys, if and when updates are managed by a service provider, updates still required to be maintained via active management. This means the Workplace software can detect if recent patching activity has been completed within the appropriate time frame set by the policy. The default time frame policy is 45 days, but the customer may request the time frame policy to be set to a shorter interval.
Also note, for managed devices, when the Operating System Auto-Update compliance check is passing, the text of the "pass" state will indicate that auto-update is enabled, even if auto-update is currently disabled, as long as the registry keys are altered as above and updates have been run within the appropriate time frame set by the policy.