<html>
<head>
<style type="text/css">
<!--
body { margin-left: 4px; font-variant: normal; margin-right: 4px; line-height: normal; margin-bottom: 1px; margin-top: 4px }
p { margin-bottom: 0; margin-top: 0 }
-->
</style>
</head>
<body>
<p style="margin-bottom: 0; margin-top: 0">
<font face="Lucida Grande" size="3">I restrict access by folder with MCX. I do it by group policy in WGM. I then put all apps that I don't want non admins to access in /Applications/utilities and restrict access to that folder.</font> </p>
<br>
<p style="margin-bottom: 0; margin-top: 0">
<font face="Lucida Grande" size="3">You can do this with casper as someone on the list previously posted it. If you look through the mail archives you should find it.</font><br><br>>>> Ryan Manly <ryan.manly@gmail.com> 11/06/09 10:52 AM >>><br> </p>
<div http-equiv="Content-Type" content="text/html; charset=ISO-8859-1">
<p style="margin-bottom: 0; margin-top: 0">
I got really annoyed with WGM's app access. It doesn't work right with allow /Applications but deny /Applications/Utilities for example. </p>
</div>
<div>
<p style="margin-bottom: 0; margin-top: 0">
<br>
</p>
</div>
<div>
<p style="margin-bottom: 0; margin-top: 0">
What I did was just pushed out a 'chmod 770' command with Casper to make /Applications/Utilities so anyone that isn't in the Admin group can't open it. </p>
</div>
<div>
<p style="margin-bottom: 0; margin-top: 0">
<br>
</p>
</div>
<div>
<p style="margin-bottom: 0; margin-top: 0">
Don't do it recursively though. A lot of things complained when I did that. Activity Monitor especially :) </p>
</div>
<div>
<p style="margin-bottom: 0; margin-top: 0">
<br>
</p>
</div>
<p style="margin-bottom: 0; margin-top: 0">
<br clear="all">
Ryan M. Manly<br>Mac OS X Expert<br>Glenbrook High Schools<br>1835 Landwehr Rd.<br>Glenview, IL 60026<br>(847) 486-4948<br><br><br> </p>
<div class="gmail_quote">
<p style="margin-bottom: 0; margin-top: 0">
On Wed, Nov 4, 2009 at 3:15 PM, Janice Hill </p>
<div dir="ltr">
<p style="margin-bottom: 0; margin-top: 0">
<<a href="mailto:jhill@sheboygan.k12.wi.us">jhill@sheboygan.k12.wi.us</a>> </p>
</div>
<p style="margin-bottom: 0; margin-top: 0">
wrote:<br> </p>
<blockquote class="gmail_quote" style="padding-left: 0; margin-left: 0; margin-right: 0; border-left: 1px #ccc solid; margin-bottom: 0; margin-top: 0">
<p style="margin-bottom: 0; margin-top: 0">
WGM uses a white list to restrict applications, and I see that in Casper as<br>well with restricting applications. I need to restrict access to terminal<br>(only) in computer labs (but not everywhere - as the programming students<br>need to use it). How are others handling this. I don't want to use WGM and<br>be forced to create a list of allowed applications, just restrict access to<br>terminal in select locations.<br><br>Janice K. Hill<br>PC Support Manager<br>Apple Certified Technical Coordinator<br>Sheboygan Area School District<br> </p>
<div>
<div>
<br>
</div>
<div class="h5">
<p style="margin-bottom: 0; margin-top: 0">
<br>
<br>
_______________________________________________<br>Casper mailing list<br><a href="mailto:Casper@list.jamfsoftware.com">Casper@list.jamfsoftware.com</a><br><a href="http://list.jamfsoftware.com/mailman/listinfo/casper" target="_blank">http://list.jamfsoftware.com/mailman/listinfo/casper</a><br> </p>
</div>
</div>
</blockquote>
</div>
<p style="margin-bottom: 0; margin-top: 0">
<br>
</p>
</body>
</html>