Skip to main content
Question

Exempt applications

  • November 4, 2009
  • 3 replies
  • 20 views
A
  • Anonymous

WGM uses a white list to restrict applications, and I see that in Casper as
well with restricting applications. I need to restrict access to terminal
(only) in computer labs (but not everywhere - as the programming students
need to use it). How are others handling this. I don't want to use WGM and
be forced to create a list of allowed applications, just restrict access to
terminal in select locations.

Janice K. Hill
PC Support Manager
Apple Certified Technical Coordinator
Sheboygan Area School District

    3 replies

    T
    Forum|alt.badge.img+31
    • tlarkin
    • Honored Contributor
    • November 4, 2009

    Sounds like a job for MCX and apply it to a smart group of the lab. You are using Casper 7 I assume?

    Or you can use restricted software and make everyone exempt except for that computer group in casper.


    Thomas Larkin
    TIS Department
    KCKPS USD500
    tlarki at kckps.org
    blackberry: 913-449-7589
    office: 913-627-0351
    chown -R us /.base

    R
    Forum|alt.badge.img+12
    • rmanly
    • Contributor
    • November 6, 2009

    I got really annoyed with WGM's app access. It doesn't work right with allow
    /Applications but deny /Applications/Utilities for example.

    What I did was just pushed out a 'chmod 770' command with Casper to make
    /Applications/Utilities so anyone that isn't in the Admin group can't open
    it.

    Don't do it recursively though. A lot of things complained when I did that.
    Activity Monitor especially :)

    Ryan M. Manly
    Mac OS X Expert
    Glenbrook High Schools
    1835 Landwehr Rd.
    Glenview, IL 60026
    (847) 486-4948

    T
    Forum|alt.badge.img+31
    • tlarkin
    • Honored Contributor
    • November 6, 2009

    I restrict access by folder with MCX. I do it by group policy in WGM. I then put all apps that I don't want non admins to access in /Applications/utilities and restrict access to that folder.

    You can do this with casper as someone on the list previously posted it. If you look through the mail archives you should find it.

    Terms & ConditionsCookie settingsAccessibility statement