tl;dr - Set DeviceExtendedAutoUpdateEnabled to Allow
The quick version is that you should probably set DeviceExtendedAutoUpdateEnabled to Allow, but know that you will lose any Android apps and Android data on those devices that begin extended updates.
Why you probably want extended updates
Chromebooks come with 10 years of OS updates, but some device models require IT administrators to opt-in to updates past 7 years. Generally you want to have as many updates as possible in order to:
Keep devices compliant with state testing requirements (often requires a recent version of Chrome OS)
Patch security flaws that are discovered over time
Enable the latest Chrome OS features
Reduce e-waste
The only downside to enabling "extended updates" is that those devices will lose Android app support. In our experience most schools aren't using Android apps extensively, so this is a worthy tradeoff. And if you don't opt-in to extended updates, over time your Android version will also become outdated and apps may stop working anyway. There are really very few reasons not to go with extended updates.
Finding which devices need extended updates
Instinctive will warn you when your devices need extended updates soon or immediately. You can click "Fix" to easily enable extended updates for the device's OU.
Full metadata is available in the detailed information below:
extendedSupportEligible - Whether you need to enable the extended updates setting
extendedSupportStart - When updates will stop if you don't enable the extended updates setting
extendedSupportEnabled - Whether you have enabled extended updates for the OU containing this device
Subtle settings misconfigurations to avoid
Extended updates are delivered as updates on the Long-Term Support channel for Chrome OS. There are a few subtle misconfigurations that you need to make sure you avoid in order to keep receiving updates:
If you use version pinning, e.g. keeping all your devices to Chrome OS 122, you should pick a version that corresponds with a Long-Term Support version. If you pick a different version, then devices in that OU will not receive extended updates.
If you set an OS update channel to follow (e.g. Stable, Beta, Dev, Long-Term Support), you should pick Long-Term Support. If you pick a different channel, then devices in that OU will not receive extended updates.
Instinctive
