App Store
com.apple.appstore
The payload that configures macOS App Store restrictions.
Not available with User Enrollment · Only one instance per profile
3 of 5 settings are available in the Intune Settings Catalog. The remaining settings require a custom .mobileconfig profile.
DDM recommended — 3 of 5 settings support Declarative Device Management. In Intune use Settings Catalog → Declarative Device Management.
Configuration Keys (5)
| Key | Type | Description | Default | Range | DDM |
|---|---|---|---|---|---|
Require Admin To Install macOS 10.9+ · deprecated 10.14 deprecated | boolean | If 'true', the system restricts app installations to admin users only. Deprecated in macOS 10.14. Use the 'com.apple.SoftwareUpdate' payload key 'restrict-software-update-require-admin-to-install' instead. | Default: false | Range: — | |
Restrict app installations to software updates only macOS 10.10+ | boolean | If 'true', the system prevents App Store from launching. Restricts installations to software updates only in macOS 10.10 through 10.13. | Default: false | Range: — | |
| boolean | If 'true', the system disables app adoption by users. | Default: false | Range: — | ||
| boolean | If 'true', the system disables software update notifications. | Default: false | Range: — | ||
Restrict app installations to MDM-installed apps and software updates | boolean | Restrict app installations to MDM-installed apps and software updates | Default: — | Range: — |