My InfoSec team is making a similar request as yours. I've tried running
your above script via JAMF (with the user look up adjusted for new
OS's), and it is coming back with no errors, however the logged in user
is still being told they "may not run ...
