Permit/prohibit access to the user-specific applications

Path

User Configuration > Policies > Centrify Settings > Mac OS X Settings > Application Access Settings > Permit/prohibit access to the user-specific applications

Description

Define a list of additional applications that users are permitted to run if you selected Users can only open these applications, or not allowed to use if you selected Users can open all applications except these. If enabled, you must specify the CFBundleIdentifier to identify the application; for example, for the Firefox browser, the CFBundleIdentifier is: org.mozilla.firefox. To find the CFBundleIdentifier complete the following steps:

  1. In the Finder, locate the application to control.
  2. Control-click or right-click the application, then select Show Package Contents.
  3. If necessary, expand the Contents folder, then open info.plist with a text editor.
  4. Find the string: <key>CFBundleIdentifier</key>.

    On the next line is the application’s CFBundleIdentifier; for example:

    <string>org.mozilla.firefox</string>

  5. Use org.mozilla.firefox to identify the Firefox browser.

To add an application to the list, select Enabled, then click Add and enter the CFBundleIdentifier and click OK.

You may also control access to system preference panes by using the CFBundleIdentifier. You can find the CFBundleIdentifier for system preference panes in /System/Library/PreferencePanes. You can specify any application object that has a CFBundleIdentifier in its info.plist file.

Note:   Some applications may not have a CFBundleIdentifier (when you right-click the application name, there is no Show Package Contents menu item). In this case, you cannot add the application to the list of permitted or prohibited applications.

This policy is only effective if the Permit/prohibit access to applications group policy is enabled. If the Permit/prohibit access to applications group policy is not configured or disabled, this group policy is ignored.

Once enabled, this group policy takes effect when users log out and log back in.