Mac Apps via VPP

Valued Contributor


We have 60 Licences for ARD.

We scoped it to a number of AD Groups.

It's set to 'make available in Self Service.

Now, It states that all 60 licences are in use, even when they have not been installed on some of the devices..

So, I then removed some of the AD groups scope so that there are less than 60, however, It still states that all 60 are in use??

After removal of the groups, I refreshed the content for ARD, no joy!

I'm confused??

How the heck does that figure??

Anyone got any ideas??



Contributor II

VPP counts against what its scoped to, not necessarily what has it installed. It could be waiting for an inventory update to release the unscoped groups. 

Valued Contributor

Yeah, I've decided to use EA's and groups.. 

Better that way and it does what it says on the tin..:-)


Valued Contributor

we are deploying a large amount of apps. are you saying each needs it own EA / Smart Group.. can you share the EA / Smartgroup logic?

Valued Contributor

The way it was, Scoped to all computers and all users, then limitations were set by AD Groups..

It didn't seem to pick up that there were limitations and based it on the All computers all users..


Contributor III

Pretty sure there's been ongoing known issues with jamf and limiting scopes via ad / ldap groups for the longest time. Easier to avoid and group another way as kerouak answered