Testing out Device-Based VPP (JSS 9.82/OS X 10.11.2&3) and after banging my head against the wall, tried switching from my non-admin to my admin account and things installed instantly. Is this normal behavior? Am I the only one who didn't know this? Our goal around device-based VPP was to deploy to standard users - not helping. Have other seen this? When using my standard account, I get presented with this prompt:
Solved! Go to Solution.
@NCSD VPP installs run within the user context if you want this to change you need to inform Apple.
You really do need to uncheck "Require admin password to install or update apps" in your restrictions profile to stop getting the message.
But you can counter this somewhat by checking "Restrict App Store to MDM installed apps and software updates"
So even if a student open the Mac App store, it would show the macOS updates tab only & they would need to be admins to install items from there.