Apply a policy to a specific local user account

[BerkleySupport]

We are trying to disable Chrome Incognito Mode for a specific local user account.
We can do this 'manually' at the iMacs, but we can't see how to scope the policy to a specific local user account.

[teodle]

This could be scripted using a parameter label. Parameter labels are a way to pass variables interactively to scripts. And whoever writes the policy doesn't have to rewrite the script; they would just have to know the username.

In your script do this. Now your variable for user becomes $user. You then define parameter 4 as user in the options tab of your script

user="$4"

Then in your policy, you enter a specific username into the parameter that will show up named "user" and the script only applies to that user no matter how many workstations you scope it to, provided that user exists on those machines.

[teodle]

@BerkleySupport When you create policy, you can scope it to specific users. Seems that there are two different ways to do this. Through the main tabs or through limitations. The script you posted though, doesn't that disable Icognito forever at the computer level?
Why don't you just ban that one user from your computer labs? :)

[BerkleySupport]

There are numbers of students using Incognito mode, so it's not that simple. When we run the script logged on the the Student account manually it works permanently, after a restart.

Our challenge is to get it to do the job under Jamf. In the good old days we'd do this with Remote Desktop.

[BerkleySupport]

Parameter labels haven't solved the issue. We've also tried using the Target Drive option set to: /Users/student/ but with no success.