Restricting applications using Managed preferences or Configuration profiles

[pty10]

I work in a school environment where I want to only allow access the certain apps instead of having to try to block every single app students install on their Macbooks. Had a look around in the discussion forum for ideas and I had a few questions.

1. If I try to use Configuration profiles with the restrictions option, when it comes to the section where 'user can always launch these apps' the only apps listed are the ones I believe come installed by default with the MacBook. If I have for example other apps that are not listed (e.g. Microsoft office, adobe suite, etc) is there a way for me to add apps to the list?

2. When it comes to Managed preferences and Application access if I do a whitelist, students will be able to use anything inside that's inside the applications path (/Applications/) folder? If that's the case I'm assuming that I wont be able to restrict any unwanted app that's already inside the application folder?

3. With Managed preferences when doing a folder whitelist, is it best to enforce at computer level or user level? All kids at school have their own Macbooks

Thanks for your time,

Henry

[sean]

You say

students install

and

their MacBook

. If they have admin rights they can circumvent anything you put in place and should you prevent students from using any app on their own machine?

The list of apps are those on the profile server. Unfortunately you need each app you wish to use in a profile installed on the server. Don't panic! Instead of installing every app, creating dummy apps with packagemaker or similar, named appropriately, will get around this. Doesn't help with version numbers though, unless you try and match those too!

[pty10]

Hi Sean,

Machines are school property and they know they not allowed to install any software unless it's been approved by the school. I'm assuming that your suggestion in regards to an app having to be installed in a profile on the server has to do with configuration profiles?