Description
In iOS 17.4, third party marketplaces are permitted in order to comply with the European Union Digital Markets Act. In order to protect managed devices, Apple also introduced the allowMarketplaceAppInstallation key in iOS 17.4 which prevents third party apps and third party marketplaces from being installed on supervised iPhones. This new restriction has been added to Jamf School to help protect supervised iPhones managed by Jamf School.
Note - this change only impacts iPhones in the 27 EU member countries at this time (UK is not impacted).
Restricting Third Party Apps/Marketplaces on Supervised iPhones
By default in Jamf School this setting is automatically configured (on existing and new profiles) to allow third party apps and marketplaces to be installed on supervised devices.
In order to restrict this, follow the steps below:
In Jamf School, open your existing profiles with the Restrictions payload configured or create a new one following Devices Profiles in the Jamf School Documentation.
Note - if you have more than one profile with a restriction configured, the more restrictive setting should apply.
Click on the Restrictions payload and in the Functionality > Applications section ensure the the box for Allow marketplace app installation is unchecked if you do not want to allow third party apps and marketplaces on supervised iPhones.
Click Save. If updating existing profiles, repeat for each profile.
For new profiles, ensure desired device groups are added to the scope of the profile.
Click Scope in the upper-left corner of the profile.
Click + to add a new device group and choose the group from the dropdown. Repeat for each group desired.
Click Save once all groups have been added.