macOS Golden Gate 27.2

macOS 27.2 known issues for MDM admins. Is it safe to deploy?

Pilot first

Deploy verdict: Pilot first

Released Oct 26, 2026 with 263 security fixes and no actively exploited CVEs per SOFA. As of Oct 28, no widespread 27.2-specific regressions with Jamf or Intune have been reported. Apple's enterprise notes list Platform SSO fixes, including password sync for devices registered on macOS 26 or earlier, so it's the build to target if your Macs are already on 27.x. For 26 to 27 upgrades, migrate update management to DDM first; legacy update payloads stop working on 27. The 27.2 RC notes listed two known issues: missing notification prompts after a clean install, and external display arrangement possibly changing.

Sources

Checked: Apple enterprise and security notes, Mr. Macintosh, Jamf Nation, r/macsysadmin and r/Intune (via search), Microsoft Intune known issues page.

Last reviewed 2026-10-28.

Release facts

Version	27.2
Build	26B123
Release date	Oct 26, 2026
Days since release	2
Security fixes (CVEs)	263
Actively exploited CVEs fixed	0

Apple security notes · All Apple security releases · SOFA

Timing and deferral

SOFA expiration date: Jan 26, 2027 (in 90 days). This is the ExpirationDate SOFA reports for this build, taken from Apple's update metadata. Treat it as the date Apple may stop offering this build. It isn't an Apple-announced signing deadline.
Deferral windows (calculated from the release date):
- 30-day deferral ends Nov 25, 2026 (28 days left)
- 60-day deferral ends Dec 25, 2026 (58 days left)
- 90-day deferral ends Jan 24, 2027 (88 days left)
Shipped 28 days after the previous macOS 27 release.

Jamf Pro + Intune notes

Jamf Pro

Jamf Nation's 27.2 release thread (Oct 27) had no deployment problems reported at the time of review. (source)
Apple removed legacy MDM software-update commands, the Software Update payload and the deferral keys in the Restrictions payload in macOS 27. Jamf says workflows that depend on them 'will fail silently or return stale data'. Move update management to the Software Updates and Software Update Settings blueprint components before you let Macs upgrade. (source)
AFP file share distribution points can't be mounted on macOS 27. Switch to SMB or HTTPS. (source)
Community report: local accounts created by Jamf Connect (without enrollment customization) aren't MDM-capable, so user-level declarations such as the new Accessibility app configuration can't be applied to them. (source)
Der Flounder (Rich Trouton) reported that profile-based enrollment of macOS 27.0.0 virtual machines into Jamf Pro installs only the MDM profile. No further profiles or Jamf components arrive. This matters if you test in VMs. (source)

Microsoft Intune

27.2 includes Apple's Platform SSO fixes (new login UI only by default for OpenID or Touch ID policies; password sync fixed for devices registered on 26 or earlier). Re-test your PSSO login and FileVault unlock flow on a pilot ring. (source)
Apple removed legacy MDM software update settings and commands in OS 27. Message Center MC1470869 says Intune's October (2610) service release removes the legacy update UI, and devices without DDM software update policies 'may fail to update'. Use Settings catalog > Declarative Device Management > Software Update. (source)
Platform SSO: admins reported 'Authentication failed' at login after moving to macOS 27.0.x, and Okta documented the issue. Apple's macOS 27.2 enterprise notes change when the new Platform SSO login UI is used by default and fix password sync for devices registered on macOS 26 or earlier. (source)