MacOS Restricted Software Best Practice

[cleverleys]

Hi all,
I hope you are well and managing to stay safe.

Does anyone have any thoughts on best practice of app restrictions with Mac? Obviously there is the restricted software section, and from the config profile, restrictions, applications. I'm guessing you could also do it within policies.

Any thoughts?

[anickless]

Main place you want to do this is in the "restricted software" section. And config profiles as well, never have done policies for restrictions as those two methods work the majority of the time if done correctly. (k-12 district here)

[beeboo]

note, its not terribly robust as wildcards dont seem to work anymore.
also, if a user has admin rights and changed the name of the app, it wont restrict it anymore.