com.TablePro domain before falling back to the values inside the app. A managed preference written by MDM therefore wins over anything a person picks in Settings > General, and the control for it appears dimmed.
Three keys decide the behavior.
A profile that turns off background updating entirely:
com.TablePro payload through whichever MDM the fleet runs.
What this does not change
Check for Updates… still works and still reaches the feed. It is a person asking, not a background check, so no key here suppresses it. Signature checking is not configurable. Every build is verified against the EdDSA public key inside the app before anything installs, and there is no key that turns that off. Privacy covers what an update check sends.Auditing what a Mac is set to
does not exist is unset, and the value inside the app applies: checks on, automatic installs on, daily.
