Posted on 05-10-2024 08:09 AM
I'm starting to investigate restricting access to the App Store on our macOS, iOS, and iPadOS devices. The technical side is easy enough with just a config profile, but I'm unsure what will happen to existing machines that have installed things from the App Store. I don't think these applications will be uninstalled, but I'm not sure about if they'll get future updates.
Can someone clarify the behavior around existing App Store installs after the App Store has been restricted?
Posted on 05-10-2024 09:44 AM
If you block the App Store, and you probably should if you want to maintain financial/license/security control over your end points, then you should be distributing AppStore software through Jamf. This means managing purchases (single apps and volume purchases) through Apple Business Manager (or Apple School Manager). Installs and updates aren't effected by the user's access to the App Store - that just blocks them from using the App Store in the GUI.
Posted on 05-10-2024 09:51 AM
I'm aware of that. What I'm unclear on is what happens when an update is released for an app the user installed through the App Store before we blocked it.
Posted on 05-10-2024 10:52 AM
Well, try it?
Posted on 05-10-2024 12:03 PM
If it's installed under a personal iCloud account, they won't be able to open the App Store and can't manually install the update. If software is installed through an ABM purchase and assignment in Jamf there's an option there to keep the software up-to-date and it should happen in the background.