I purchased WhatsApp licenses through Apple Business Manager and tried pushing the app to an iOS device through Hexnode, but the App Installation action was failing on the device profile.
I also wanted to prevent users from downloading their own apps from the App Store, so I wasn’t sure if the restriction policy was affecting the managed app install. Is there a recommended way to block user-installed apps while still allowing Hexnode to install VPP apps?
68 Views
For iOS devices, app installation behavior can be affected by the restrictions applied through the policy. If the goal is to prevent users from installing apps manually while continuing to deploy managed apps through Hexnode, check the restriction settings in the associated policy:
These restrictions are useful when you want to block user-initiated App Store installs while managing app deployment centrally through Hexnode and Apple Business Manager/VPP.
I unchecked both Install Applications and Install apps from App Store in the restriction policy, saved it, and retried the deployment. WhatsApp installed successfully after that.
If you also want to prevent users from signing in with an Apple ID to install apps, you can disable account modification as well. In the Advanced Restrictions policy, uncheck Modify an account. This prevents users from using an Apple Account on the device to sign in with their Apple ID and install applications outside of the managed deployment flow.
Don't have an account? Sign up
What's new 
