Skip to main content
Question

Remove MAS installed apps as standard user account without authentication?

  • November 17, 2015
  • 5 replies
  • 33 views

Forum|alt.badge.img+5

Is there a way to allow a standard user account to remove Mac App Store (MAS) apps via Launchpad without the prompting of administrator credentials?

I'd like for our students to be able to remove some of the games they thought they needed to install but have since decided they would like them removed.

5 replies

bpavlov
Forum|alt.badge.img+18
  • Esteemed Contributor
  • November 17, 2015

How about you create Self Service items that does the uninstall for the user?


Forum|alt.badge.img+10
  • Contributor
  • November 17, 2015

There's an entry for com.apple.uninstalld.uninstall in authdb that handles the rights to remove removing Mac App Store applications. The security authorizationdb command should allow you to adjust the rule

 <key>com.apple.uninstalld.uninstall</key>                                                                             
    <dict>
        <key>class</key>
            <string>rule</string>
        <key>rule</key>
            <string>entitled-admin-or-authenticate-admin</string>
    </dict>

Forum|alt.badge.img+5
  • Author
  • Contributor
  • November 18, 2015

Thanks @htse . I'll take a look into that.


Forum|alt.badge.img+1
  • New Contributor
  • February 26, 2016

@smurphyusd346 , would love to know if you found a solution to this. Apple indicated there wasn't a way to accomplish this, but I was hoping to find out otherwise. Wonder if changing the authorizationdb gives uninstall rights to all applications or just those of MAS apps. Thanks for any insight.


Forum|alt.badge.img+5
  • Author
  • Contributor
  • February 26, 2016

@cgraves I have not looked into it anymore and didn't try the authorizationdb method yet.

Post back if you find some results.