Hi,
has anybody experience in changing the vpp account?
Our company has a new DUNS and we have to create a new account for VPP because it isn't possible to change it. We will use the same account which is already in use with Apple DEP. At the moment we are using an additional account for VPP with our old DUNS.
Questions:
What happens on the devices if I change the vpp token?
I would like to avoid that all VPP-apps will be removed from the devices.
Best regards,
Marcel
Please clarify your situation:
1. Were your devices non-DEP devices when you used the old VPP account to deploy apps?
2. Were there paid apps or free apps?
3. Are you having a DEP account with the new DUNS now, and have created a new VPP account?
4. If the answer to (1) is affirmative, do you intend to change the devices to be DEP devices?
5. Are you using a second but new MobiControl server instance with your new VPP account?
6. What is the build and version numbers of your MobiControl server?
7. What are the firmware versions of your iOS devices?
1) Both (non DEP-devices and DEP-devices)
2) Only free apps like Excel, Word, etc.
3) We would like to use our DEP account (Apple Business Manager) which already exist. We didn't create a new account for that. Our old account is only VPP account (without Apple Business Manager)
4) No it is not our intention to change these devices to DEP. Only new devices will be configurated by DEP
5) No only one instance with two deployment servers
6) 13.3.0.3851 but in January we will update to 13.4.0.5156
7) iOS 12.x
So you have a two-DS HA system running Mobicontrol v13.x. Previously, you only had VPP account, and all devices at that time were non-DEP devices and you had some free apps deployed to them. You still have access to this VPP account (and buy more free apps and download the token) now, don't you?
Now, you have DEP account and some new DEP devices. The old non-DEP devices will remain non-DEP devices. You can now use the new VPP admin account in ABM to buy new apps, right?
Assuming what I just said above is the case you have, then
1. you should be able to keep on using the old VPP account to deploy apps to your old non-DEP devices. Don't delete your old VPP user account in Mobicontrol web-console.
2. you can add a new VPP user account in Mobicontrol web-console, and import the VPP app token from your new VPP account in ABM to deploy VPP apps to your DEP devices. In other words, you have two VPP app tokens on your MobiControl server instance. Actually, Each MobiControl server implementation can support hundreds of VPP tokens to be imported, with each token managed by a different VPP account administrator (on ABM portal) responsible for devices of a department/group in an organization.
Of course, you should make sure devices of different groups (the old non-DEP device group and the new DEP device group in your case) are systematically handled with separate app-catalog rules and clear-cut device-group hierarchy to avoid confusion. Otherwise, if you move a device from a device-group using one app-catalog rule to a new group using another app-catalog rule, then even if you have the same app on both rules, you might still risk having that same free app binary uninstalled and then reinstalled, and with possible loss of user's data originally stored in the sandboxed directory of the app.
I think I've found a final solution.
Just added the new VPP token into our console as you described.
Afterwards edit the existing Application Rule where you can easily switch the account from old to new.
After the next device check in everything will be fine without installing the apps again.
Maybe I will delete the old VPP accout in a few weeks. We will see.
