Blocking Users ability to run Scripts

[namesiw]

So...I feel like I know the answer to this, but this recently came up in a meeting.

There is a small group of users that my company would like to prevent from being able to do certain things. One of them is running scripts on their Macs. My first reaction was, "this seems impossible". There are times when I need to run a script as the user. If they can't run scripts then I can't run scripts.

Has anyone else come across this in their company or is mine the only one being ridiculous out there?

Thanks

[sdagley]

@namesiw You'll find a few threads on Jamf Nation on temporarily granting users admin rights. One new entrant in this category is Privileges.app. If making the users Standard users accomplishes the restrictions you want, you could have Privileges.app on their Macs and blocked with a Restricted Software configuration that you could disable when you needed to be admin on their machine.