Skip to main content

Jamf Pro Restricted Software Not Applying to Computers

Updated over 2 weeks ago

Issue Description

Restricted software setting has not applied to or removed from the device following a scope change. Even though the computer is now scoped/unscoped from the restricted software settings in Jamf Pro, the software is still unrestricted/restricted on the computer.

Troubleshooting Steps

When a computer falls in and out of the restricted software settings scope, it should download a new .jmf_settings.json when it updates its management framework. This should happen automatically, but sometimes we can run into situations where we need prompt the jamf binary to update.

  1. Verify that the restricted software settings are either scoped or unscoped to the computer by going to the computer record directly:

    1. In Jamf Pro go to Computers > Search Inventory and search for the computer by name or serial number.

    2. Click on the computer to pull up its inventory record.

    3. Click on the Management tab and select Restricted software.

  2. After verifying that the restricted software settings are or aren't here (whichever we're trying to achieve), we can run the following command, either locally or via policy, to force the computer to pick up an updated copy of the jmf_settings.json.

    Run locally: sudo jamf manage Run via Policy > Files and Processes > Execute Command: /usr/local/bin/jamf manage

Did this answer your question?