Hey, thanks for the detailed report. You understood it correctly. UpdateMode update.mode only applies to the Cursor app updater, it doesn’t apply to extensions.
About extensions.autoUpdate: the setting exists in Cursor and works locally, but unlike VS Code it isn’t registered as an MDM policy yet, so there’s no ExtensionsAutoUpdate key in Cursor .mobileconfig profiles. Right now the profile only supports AllowedExtensions, AllowedTeamId, ExtensionGalleryServiceUrl, and UpdateMode.
Workaround: deploy a managed settings.json via MDM with:
{
"extensions.autoUpdate": false,
"extensions.autoCheckUpdates": false
}
This will stop extension auto-updates on machines. The downside is that unlike a real MDM policy, this settings.json is still editable by the user, so it doesn’t provide strict enforcement.
Expanding the MDM policy set including ExtensionsAutoUpdate is already tracked as a request here: MacOS managed settings. I’d recommend adding your use case there so it’s captured in one place. I’m moving this thread to Feature Requests.