Posted on 11-27-2013 08:09 AM
I am curious how people handle updating the "iLife apps" in an enterprise environment.
I would like to push via policy the newest iMovie/iPhoto apps without it being tied to an Apple ID. Is that possible or does each device/user have to update the app via App Store?
I tried the /usr/sbin/softwareupdate -ia command, but I don't think this command will update Apple ID apps.
Posted on 11-27-2013 08:34 AM
1) "Purchase" and download the apps using an organizational AppleID. Distribute the apps using Casper's normal techniques for software distribution to clients that are licensed/eligible for the apps.
2) When there are updates, repeat #1 above.
Posted on 11-27-2013 08:37 AM
Also see @rtrouton blog post about getting the app installer using debug mode in the app store.
Previous thread from here: https://jamfnation.jamfsoftware.com/discussion.html?id=8818
Blog post: http://derflounder.wordpress.com/2013/08/22/downloading-apples-server-app-installer-package/
That works for me and I'm in an enterprise environment. Hopefully it helps you.
Posted on 11-27-2013 09:02 AM
Thanks @gregneagle I pitch that to my bosses and they did not like that idea, since the apps were pre-installed with the OS when the devices were purchased. For most apps the users have to just purchase the app via the app store with their apple ID, but the bosses wanted the updates pushed to make sure all the devices are on the same app version. Currently there are 5 different versions out in production, depending on when the device was purchased.
Thanks @perrycj I will check this out.
Posted on 11-27-2013 09:09 AM
Once the app is "owned" by a personal AppleID, you will not be able to update it short of replacing it with the same app, owned by an organizational AppleID.
If your org wants to manage the updates, they need to "own" the app.
Posted on 11-27-2013 09:25 AM
I'm not certain how "kosher" this is from a licensing angle but I know that deleting the /Applications/AppName.app/Contents/_MASReceipt folder will effectively untie this app from the purchased ID and allow the update to install without prompting for an ID. I came across this when an inherited system had an application that was purchased by a user no longer with the company but required an update.
Posted on 11-28-2013 01:03 AM
JAMF has an article on deploying Mac App Store applications:
https://jamfnation.jamfsoftware.com/article.html?id=206
As @gregneagle][/url][/url mentioned you'll need to rinse and repeat every time updates are released. Get used to it, not all new Macs come with bundled Mac App Store apps preinstalled...
The URL at the bottom is broken, I alerted JAMF.
Don
Posted on 04-23-2014 09:40 AM
Hmm...we tried doing this "rinse and repeat" method, and I'm not sure why it isn't clearing the pending updates from the App Store. Any thoughts?
Posted on 04-23-2014 09:44 AM
Interesting, maybe with VPP+DEP the article in my last post is no longer relevant?
Posted on 04-23-2014 09:46 AM
We're enrolled, but I don't think that has any bearing on OS X Apps? I thought it was only for iOS.
Posted on 04-23-2014 09:49 AM
@kempt http://www.jamfsoftware.com/resources/vpp-dep-leveraging-apples-new-it-deployment-programs/
Posted on 04-23-2014 09:58 AM
That focuses mostly on iOS, which isn't our issue.
Posted on 04-23-2014 10:19 AM
@kempt are you using MAS receipts when deploying the packages?
Posted on 04-23-2014 10:20 AM
@perrycj, I'm not sure...this thread is the first I've heard of them.
Posted on 04-23-2014 10:22 AM
@kempt check the links I posted up above. They work for me without issue.
Posted on 04-23-2014 12:01 PM
I've noticed when using the rinse-and-repeat method that the pending update display isn't cleared until the Mac App Store is opened, or the user logs out and logs in again. I haven't been able to find a way to force the MAS to rescan.