Difficulty Disabling Bundled App Store App Adoption

[milesleacy]

Hi Nation!

I'm hoping someone has solved this problem. I am attempting to "Disable App Adoption by users" (restrict-store-disable-app-adoption) per the AppStore Payload per Apple's Configuration Profile Reference.

The profile is delivered to the Macs in scope, but the apps are still offered for adoption. Has anyone else seen this behavior and found a functioning workflow? My last resort is going to be to delete the app stubs at enrollment time and then redeploy them via VPP, but I'd rather be able to deliver the setting correctly.

Given the lack of granularity in the Jamf GUI - see FR Break Up Multi-MDM-Payload GUI Payloads - I have built this as a custom profile. Please let me know if you see any silly errors in the custom profile below (UUIDs sanitized).

Thanks!

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1">
  <dict>
    <key>PayloadUUID</key>
    <string>XXXXXXXX-YYYY-ZZZZ-AAAA-BBBBBBBBBBBB</string>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadOrganization</key>
    <string>Walmart</string>
    <key>PayloadIdentifier</key>
    <string>XXXXXXXX-YYYY-ZZZZ-AAAA-BBBBBBBBBBBB</string>
    <key>PayloadDisplayName</key>
    <string>Disable App Store App Adoption</string>
    <key>PayloadDescription</key>
    <string>Disables macOS offer of bundled app adoption to user (iMovie, Keynote, Numbers, Pages).</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
    <key>PayloadEnabled</key>
    <true/>
    <key>PayloadRemovalDisallowed</key>
    <true/>
    <key>PayloadScope</key>
    <string>System</string>
    <key>PayloadContent</key>
    <array>
    <dict>
        <key>PayloadUUID</key>
        <string>CCCCCCCC-DDDD-EEEE-FFFF-GGGGGGGGGGGG</string>
        <key>PayloadType</key>
        <string>com.apple.appstore</string>
        <key>PayloadOrganization</key>
        <string>Walmart</string>
        <key>PayloadIdentifier</key>
        <string>CCCCCCCC-DDDD-EEEE-FFFF-GGGGGGGGGGGG</string>
        <key>PayloadDisplayName</key>
        <string>App Store</string>
        <key>PayloadDescription</key>
        <string/>
        <key>PayloadVersion</key>
        <integer>1</integer>
        <key>PayloadEnabled</key>
        <true/>
        <key>restrict-store-disable-app-adoption</key>
        <true/>
      </dict>
      </array>
  </dict>
  </plist>

[el2493]

Were you able to get a version of this working? I'm trying to do the same thing myself and don't seem to be having any success. My .mobileconfig seems to mostly have the same sort of data that yours does, though it's organized a little differently.

<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
    <key>PayloadContent</key>
    <array>
        <dict>
            <key>PayloadDescription</key>
            <string>Disables App Store updates for apps not installed through App Store.</string>
            <key>PayloadDisplayName</key>
            <string>Disable App Adoption</string>
            <key>PayloadEnabled</key>
            <true/>
            <key>PayloadIdentifier</key>
            <string>com.apple.appstore.XXXXXXXX-YYYY-ZZZZ-AAAA-BBBBBBBBBBBB</string>
            <key>PayloadOrganization</key>
            <string>Org Name</string>
            <key>PayloadType</key>
            <string>com.apple.appstore</string>
            <key>PayloadUUID</key>
            <string>XXXXXXXX-YYYY-ZZZZ-AAAA-BBBBBBBBBBBB</string>
            <key>PayloadVersion</key>
            <integer>1</integer>
            <key>restrict-store-disable-app-adoption</key>
            <true/>
        </dict>
    </array>
    <key>PayloadDescription</key>
    <string>Disables App Store updates for apps not installed through App Store.</string>
    <key>PayloadDisplayName</key>
    <string>Disable App Adoption</string>
    <key>PayloadEnabled</key>
    <true/>
    <key>PayloadIdentifier</key>
    <string>XXXXXXXX-YYYY-ZZZZ-AAAA-BBBBBBBBBBBB</string>
    <key>PayloadOrganization</key>
    <string>Org Name</string>
    <key>PayloadRemovalDisallowed</key>
    <true/>
    <key>PayloadScope</key>
    <string>System</string>
    <key>PayloadType</key>
    <string>Configuration</string>
    <key>PayloadUUID</key>
    <string>XXXXXXXX-YYYY-ZZZZ-AAAA-BBBBBBBBBBBB</string>
    <key>PayloadVersion</key>
    <integer>1</integer>
</dict>
</plist>