The Applications Properties settings allow you to control access to specific applications and paths to applications using digital signatures.
You can apply Application Properties settings under both Computer Configuration and User Configuration.
There are two tabs:
The Application settings control which applications are allowed to run on macOS.
Select the Manage mode: Never, Once, or Always.
Select Restrict which applications are allowed to launch if you want to disallow applications thus restricting the applications the user can access.
Application restrictions are controlled by means of folder paths. Group Policy does not currently support application management using digital signatures, therefore to allow or prevent users from launching an application, add the application or the path to the application to one of two lists:
Disallow applications within these folders.
Add folders containing applications that you want to prevent users from opening. All applications in sub-folders of disallowed applications are also disallowed.
Allow applications within these folders.
Add folders containing applications that you want users to launch. If an application or path to the application appears in both the Disallow and the Allow lists, then the Disallow list takes precedence and the user is not allowed to launch the application.
If an application does not appear in either of these lists, the user can not launch the application.
Click Add to open the New Application Item dialog. You can type the absolute Unix path or you can click Remote Browse to log into a remote macOS machine (by means of SSH) and browse for the target folder. It displays recently specified paths. To reuse a recently specified path, double-click the item in the list.
Note: Both disallow and allow paths support the %HOME% macro-expansion to the user's Unix home directory. For example, to restrict a user from running applications in their home directory, specify %HOME%. This macros is only supported by user policies; machine policies do not support this macro type.
The Options settings control macOS server settings. For example, you can choose whether to allow a user to use the App Store. If set to false, a user that attempts to use the app store will receive a message like the following: You don't have permissions to use the App Store.
Select the Manage mode: Never, Once, or Always.
Select the check boxes to enable the features you want to enable.
Allow use of Game Center
Allow multiplayer gaming
Allow adding Game Center friends
Allow Game Center account modifications
Allow App Store app adoption
Allow Safari AutoFill
Allow software update notifications
Require admin password to install or update apps
Restrict App Store to MDM installed apps and software updates
On macOS, the Dock is similar to a tool bar on other operating systems. In addition to showing which applications are running, the dock provides quick shortcuts to applications, folders and documents as well as system controls. Dock settings allow you to adjust the behavior of the user’s Dock and specify which items appear in it.
You can apply Dock Properties settings under both Computer Configuration and User Configuration.
© ALL RIGHTS RESERVED. Terms of Use Privacy Cookie Preference Center
