I've created a configuration profile desigend to disallow apps from running from the desktop, downloads & documents folders. I added the following paths to facilitate this:

/Users/$USERNAME/Downloads/
/Users/$USERNAME/Desktop/
/Users/$USERNAME/Documents/

I scoped it to a single test computer and set the profile to install automatically and apply at the user level.

Not working /-: Does anyone see where I went wrong?