User Configuration > Policies > Centrify Settings > Mac OS X Settings > Application Access Settings > Permit/prohibit access to the user-specific applications
Define a list of additional applications that users are permitted to run if you selected Users can only open these applications, or not allowed to use if you selected Users can open all applications except these. If enabled, you must specify the
CFBundleIdentifier to identify the application; for example, for the Firefox browser, the
org.mozilla.firefox. To find the
CFBundleIdentifier complete the following steps:
- In the Finder, locate the application to control.
- Control-click or right-click the application, then select Show Package Contents.
- If necessary, expand the
Contentsfolder, then open
info.plistwith a text editor.
- Find the string:
On the next line is the application’s
CFBundleIdentifier; for example:
org.mozilla.firefoxto identify the Firefox browser.
To add an application to the list, select Enabled, then click Add and enter the
CFBundleIdentifier and click OK.
You may also control access to system preference panes by using the
CFBundleIdentifier. You can find the
CFBundleIdentifier for system preference panes in
/System/Library/PreferencePanes. You can specify any application object that has a
CFBundleIdentifier in its
Note: Some applications may not have a
CFBundleIdentifier (when you right-click the application name, there is no Show Package Contents menu item). In this case, you cannot add the application to the list of permitted or prohibited applications.
This policy is only effective if the Permit/prohibit access to applications group policy is enabled. If the Permit/prohibit access to applications group policy is not configured or disabled, this group policy is ignored.
Once enabled, this group policy takes effect when users log out and log back in.