Policy to check if software is installed and up to date

[Patagonia121]

Original title: Define a list of applications that must remain automatically updated if installed on hosts, but should not be available for self-service installs

As an admin, I want to define a list of applications that must remain automatically updated if installed on hosts but should not be available for self-service installation, ensuring critical software vulnerabilities are addressed without official IT support.

• Logi Options
• Steam
• Unsupported web browsers, e.g. Firefox, Brave, Microsoft Edge, Opera etc (anything in the gray area where we don’t offer support, but do not outright ban)

[noahtalerman]

Hey @marko-lisica, heads up. I think this sounds like a new variation of "Automatic" install but only if the software is installed and out-of-date.

[noahtalerman]

Noah and Marko: This can be accomplished w/ #19551: Policy to check if software is installed and up to date + software (package or App Store app)

Marko: Plan in Q4 is to add a feature that writes these policies for the IT admin.