White-Listing Applications

[bbergstein]

Hey all-

We have a new situation where a group of users need to be able to install/update applications fairly quickly upon release, but we do not want them to be able to install anything they want. One idea we came up with was to white-list only the standard applications and the applications that we have approved, while letting them keep their admin rights. This would allow us to restrict them from using any application that we haven't reviewed the license for, but not restrict them from updating applications as needed. The only problem is, I can't find any way of doing this.

Do any of you have any ideas? Or how do you handle these types of situations?

Thanks,

Benji Bergstein
Client Strategies
Giant Eagle, Inc.

[Janowski]

Do these apps have built in updaters? Like the creative suite?

If so, you could put a policy in Self Service that lets them run that
updater as Root and thereby give them access to perform updates on JUST
those apps...

there was a post on how to create that policy a while back. Let me know if
you need the command for how to do that, i'll dig up a link to the post.