DEP enrolled device and allow the device to be able to download any app in the app store if user wants to

Can a DEP enrolled device and supervised be configured to allow the user to download apps from the app store? Want to work from a blacklist model rather than whitelist what apps can be downloaded.


Thanks.

Posted on Jul 27, 2020 6:57 AM

Reply
6 replies

Jul 28, 2020 2:50 AM in response to LinkandHarry

With the the help of an MDM solution for Apple, you can easily allow the devices to download the applications on their end, but this only works for unsupervised devices. If the device is supervised, it will not have an unique Apple ID and the App Store will be disabled on the device, preventing the user from downloading any apps. But for iOS 10 or later, the MDM can help in overriding this restriction.


Check with your MDM provider for app blacklisting policy & read the full list of restrictions for supervised devices here: https://support.apple.com/en-in/guide/mdm/mdm54960f92a/web

Jul 27, 2020 8:09 AM in response to LinkandHarry

If you pair DEP/Apple Business Manager (ABM)/Apple School Manager (ASM) with a Mobile Device Management (MDM) platform, you can set restrictions on the App Store to block purchasing. If you do this, you can use the Volume Purchase Program (VPP) to purchase apps for your users and deploy them centrally using the MDM. A benefit to this is when a user leaves, you can reclaim the app license and issue it to a new user. You would need to refer to the specific MDM instructions for deployment.

Jul 27, 2020 8:21 AM in response to LinkandHarry

  1. Navigate to Systems Manager > Manage > DEP. This will sync Dashboard with Apple, and may recover the client. If not, move on to step 2.
  2. Visit the Apple Business Manager or Apple School Manager portal.
  3. Disassociate the client from the Meraki MDM Server by setting the Server Association to Unassigned.
  4. Navigate back to Dashboard, then Systems Manager > Manage > DEP to sync again.
  5. Go back to Apple and reassign the client to the Meraki MDM Server.
  6. Visit Systems Manager > Manage > DEP in Dashboard once more to complete the final sync.
  7. The DEP-enrolled device will be seen as "new," and should appear again in the clients list.


Jul 27, 2020 8:16 AM in response to celliott147

Thank you. That's helpful.


One of our administrators told me that once you are enrolled in DEP, users will not be able to download from the app store if their Apple ID is managed? Is that true? Can DEP and managed Apple ID be configured to allow users to download free apps from app store? I can understand paid apps being restricted and purchased in a managed way... but free apps IT wants to make available but was told that DEP does not allow managed Apple IDs from permitting users to download unless explicitly granted permission for each and every app? Can that be right?


I am new at DEP and managed Apple ID so if my questions doesn't make sense... I am still learning. Thanks.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

DEP enrolled device and allow the device to be able to download any app in the app store if user wants to

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.