Skip to main content

We just got a request to block users from being able to install programs on some public use Macs. My initial thought was someone set them up with admin rights but the account is a standard user. I though standard users could not install programs?

The example they gave me and I tested was some kids would go to roblox.com and download/install it. This does indeed work as a standard user. What do I need to do to block this behavior?

Something in parental controls perhaps?

I also just found this:

  • in the users home dir verify the 'Applications' directory exists, if not create it.
  • assign it the user 'root' and group 'admin' "chmod root:admin Applications".
  • assign permissions of 000 to it "chmod 000 Applications"

from https://forums.macrumors.com/threads/how-can-i-prevent-standard-users-from-installing-software.1085631/
(quite an old thread though)


It’s an ongoing issue with certain apps that don’t have a installer (ie they download as a dmg & don’t need to be installed to run (Skype was an example- users just dragged it onto their desktop or even ran straight from the dmg)
The only way I found was to block the process from launching with restricted software setting
The other way is to use parental controls to say only what can be used


Tried using restricted software but even that does now seem to block Roblox. Did I set something incorrectly?


After going back to my test machine and finding the account locked out. I was unable to log into it. Switched users and the test account was no longer listed. Yeah I guess naming the test account Roblox may have been an issue. Seems like an odd interaction.

Went ahead and created a new test account and it did indeed stop Roblox from installing.