Hi,

I have a question haw can I setup on managed device via Jamf Pro (and Protect) configuration that restrict local account from some features, apps, internet, usb mount but on another account - admin account user can use all this features. Local restricted account enroled by Jamf, admin account added after enrolment manually. 

When the device will be login to the local restricted account should lost the connection with the internet, block some sharing features like bluetooth, airdrop, blok mount external usb devices/disks, block apps not needed or give only 2-3 apps what is needed. 

Tried wit configuration profiles with Restriction but working with all local account, trying some script on login but not working as it should. 

Could be a workaround solution…. but to get secure when restricted user use the device. 

Please give me some advice. Thanks!