This is still our first year with Casper, but in testing a few things I stumbled across the app & folder whitelist and blacklist option in configuration profiles (we're on 9.82 still).
I went through the Admin guide but couldn't find anything on using this functionality or in JAMFnation, but perhaps I wasn't searching for the right things, so sorry if this ends up being a duplicate post.
I'm trying to lockdown the ability of our students to launch downloaded apps from anywhere in their user folder. My thinking was to manually choose the folders in users' home folder (~/Desktop, ~/Downloads, etc.) but I realized this would still allow kids (if they're clever enough) to copy apps to the root of their home folder. My conundrum is how to do this without blocking apps which may exist in users' home library folder, but I wonder if there are any apps that would really warrant this exception.
So 1) can I just blacklist ~ in the config profile or 2) if I should manually choose each folder (~/Desktop, etc.) how can I allow the ~/Library folder while blocking everything else?
Could I blacklist ~ and whitelist ~/Library, or would that cause problems?
