We are looking to deploy iPads from inside our organization. We want to be able to install apps for users, which can be done via Mobile Device Management. However, we do not want users to be able to purchase apps, as these apps can be purchased with their internal purchasing account. Apps purchased that way should not be allowed to leave the organization, but a user could purchase an app on their personal Apple account, allowing them to use it on their other devices, even though they purchased it with their organizational purchasing account.
I cannot find a way to disallow purchasing of apps on an iOS device, either through local restrictions or through Mobile Device Management. All I can seem to do is:
- Restrict installing of ALL apps (unacceptable, because then we cannot push apps to devices)
- Setting up an organizational iCloud account on all the devices, and restricting changing account settings locally (unacceptable, because the password needs to be entered to accept MDM-pushed app installs)
Is there a way to block only app purchases? Is there an MDM suite that provides this functionality?