I didn't try your posted solution but we block it by enabling it only in a certain time slot (postoned) in the past with a profile for System Update Policy.

Hi Rafael,

Thanks for sharing.

Do you mind to share detail configuration? Currenly I use postpone option too, and set 90 days blocked period. But as per android policy, after 90 days it will be 60 days without any update OS restriction. So the pattern is 90 days (maximum amount of days allowed) blocked, then 60 days buffer period following any defined freeze periods.

This article for reference : https://developer.android.com/work/dpc/system-updates (Freeze Period part)

Did you use that option too?

Regards,

Randy Saputra

I was trying that option. It was not bad actually. The system update function in the settings gets greyed out. So its not
possible to look for updates. In case your device has downloaded the os update before you were able to send the script
you will get a notification about the os update. When you click on that notification you are able to install the downloaded
os update.

I am using the same method like Raffael Schäfer. It will always check within the time slot for updates. But because of
the short timeslot (1 minute) it is not even able to start the check for updates and will try it next time again. It wont give
you any notifications about available updates and when you try to check manually for updates then you get a notification
that the os updates are managed by your organisation.

Sorry, i was a bit wrong. For sure it's the freeze period. But you can add multiple 90-days periods.

We only use it as long as the new update is tested, then we remove that policy or switch to automatic.