1# Manage app updates
2
3> For the complete documentation index, see [llms.txt](https://learn.chatgpt.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to the page URL.
4
5The ChatGPT desktop app normally checks for and installs updates on its own. If
6your organization needs to review new releases before users receive them, you
7can turn off the app's built-in updater and deploy approved versions through
8your device management platform.
9
10The app's updater remains enabled by default. Turning it off doesn't stop
11Microsoft Store, Microsoft Intune, mobile device management (MDM), package
12managers, or other external deployment tools from installing updates.
13
14## Before you begin
15
16Confirm that you have:
17
18- Codex administrator access to
19 [Managed configuration](https://chatgpt.com/codex/settings/managed-configs)
20 for your workspace.
21- A ChatGPT desktop app release for macOS or Windows that supports
22 organization-managed updates.
23- An MDM or software-deployment platform that can install approved app packages
24 on your managed devices.
25- A process for testing new releases, deploying security updates, and tracking
26 installed app versions.
27
28If you haven't deployed the app on Windows, start with
29[Deploy the Windows app](https://learn.chatgpt.com/docs/enterprise/windows-deployment).
30
31## Turn off in-app updates
32
33<WarningTip>
34 When you turn off in-app updates, your organization is responsible for
35 promptly deploying new app releases and security fixes. Delaying updates can
36 leave the app and its bundled components exposed to known security
37 vulnerabilities. Older app versions don't receive separate security patches or
38 extended support.
39</WarningTip>
40
41Create a managed policy that disables the desktop app's own updater:
42
431. Open
44 [Managed configuration](https://chatgpt.com/codex/settings/managed-configs).
452. Select **Add policy**, or open an existing policy for the users, groups, or
46 platforms you want to manage.
473. Under **Targets**, select **Add target** to assign the policy to specific
48 **Groups**, **Users**, or **Platforms**. Start with a small pilot group when
49 possible.
504. Open **Raw TOML** and find the **requirements.toml** editor.
515. Add the following policy:
52
53```toml
54 [features]
55 in_app_updates = false
56```
57
58 If your policy already contains a `[features]` table, add
59 `in_app_updates = false` to that table. Don't add a second `[features]` table
60 or put the setting in **config.toml**.
61
626. Select **Save changes**.
637. Ask affected users to fully quit and reopen the ChatGPT desktop app. Closing
64 the app window isn't always enough to restart the application.
65
66Some workspaces show a policy-list editor instead of the **Raw TOML** tab. In
67that interface, add the same TOML block directly to the applicable policy, use
68**Groups** to assign it when available, and select **Save**.
69
70For details about managed policy delivery and precedence, see
71[Managed configuration](https://learn.chatgpt.com/docs/enterprise/managed-configuration).
72
73## Verify the managed setting
74
75After the app restarts, verify the policy from an affected user's device:
76
771. Sign in to the ChatGPT desktop app with an account covered by the policy.
782. Open **Settings** > **General**.
793. Find **In-app updates** and confirm that it shows **Managed** and the message
80 “Your organization has turned off in-app updates.”
814. Confirm that your device management platform can still deploy an approved app
82 version.
83
84The **Check for Updates** menu option can remain visible even when the policy
85blocks in-app updates. Use the **Managed** indicator to verify the policy
86instead of checking whether that menu option appears.
87
88If the indicator doesn't appear after the first restart, the app might still
89use a cached policy. Allow the policy to refresh, then fully quit and reopen the
90app again. Don't rely on the update restriction until **Managed** appears.
91
92## Deploy approved app versions
93
94After you turn off in-app updates, use your existing device management process
95to deliver new releases:
96
971. Choose an app version that your organization plans to deploy.
982. Get the supported installation package for each operating system and
99 device architecture in your fleet.
1003. Test the release with a small group of representative users.
1014. Deploy the approved package through Microsoft Intune, your MDM platform, or
102 another software-deployment tool.
1035. Check device inventory to confirm your platform installed the intended
104 version, then expand the rollout to other groups.
105
106Your management platform determines how you stage releases, select versions,
107and recover when a deployment doesn't complete. If your platform permits
108rollback, returning to an older version doesn't extend support or guarantee
109service compatibility.
110
111For macOS, download the
112[ChatGPT desktop app installer](https://persistent.oaistatic.com/codex-app-prod/ChatGPT.dmg).
113For Windows installation methods and architecture-specific packages, see
114[Deploy the Windows app](https://learn.chatgpt.com/docs/enterprise/windows-deployment).
115
116## Turn in-app updates back on
117
118To restore the app's normal update behavior:
119
1201. Identify the managed policies, system `requirements.toml` files, and MDM
121 profiles that turn off updates for the affected users.
1222. Remove `in_app_updates = false` from each applicable `[features]` table.
1233. Save the policy changes and redeploy any updated device-managed requirements.
1244. Ask affected users to fully quit and reopen the ChatGPT desktop app.
1255. Check **Settings** > **General** to confirm that the **In-app updates**
126 managed row no longer appears.
127
128When no applicable policy sets `in_app_updates = false`, the app's built-in
129updater follows its normal behavior. If the **Managed** indicator still
130appears, review other workspace policies, MDM profiles, and system
131`requirements.toml` files. See
132[Locations and precedence](https://learn.chatgpt.com/docs/enterprise/managed-configuration#locations-and-precedence)
133for the order in which managed sources apply.
134
135## Understand security and support responsibilities
136
137After the app receives and applies it, the managed update policy:
138
139- Prevents the desktop app from checking for, downloading, or installing updates
140 through its own updater.
141- Doesn't provide OpenAI-managed version pinning, a separate release channel,
142 or guaranteed service compatibility for older versions.
143- Applies to the ChatGPT desktop app on supported macOS and Windows builds. It
144 doesn't manage updates for mobile apps, Codex CLI, or the IDE extension.
145
146## Troubleshoot common issues
147
148If an authentication problem, connection issue, or timeout prevents the app
149from retrieving or applying the managed policy, its built-in updater can
150remain enabled. Don't assume the app blocks updates unless **Managed** appears.
151
152If the **Managed** indicator doesn't appear, confirm that:
153
154- The affected user selected the intended workspace.
155- The policy targets that user, group, or platform.
156- The device runs a supported app version.
157- The app can connect to the service that delivers managed policies.
158- The setting is in **requirements.toml**, not **config.toml**.
159- The user fully quit and reopened the app after you saved the policy.
160
161If you can't open Managed configuration or save a policy, confirm that you have
162Codex administrator access for the workspace.
163
164If the app version changes after you disable in-app updates, check whether
165Microsoft Store, Intune, MDM, a package manager, or another deployment system
166installed the update. The policy controls only the app's built-in updater.
167
168## Related docs
169
170- [Managed configuration](https://learn.chatgpt.com/docs/enterprise/managed-configuration)
171- [Deploy the Windows app](https://learn.chatgpt.com/docs/enterprise/windows-deployment)
172- [`requirements.toml` configuration reference](https://learn.chatgpt.com/docs/config-file/config-reference#requirementstoml)
173- [Admin rollout guide](https://learn.chatgpt.com/docs/enterprise/admin-setup)
