Description
Restricted software allows you to prevent users or groups of users from accessing certain applications. For each application that you want to restrict, you must create a restricted software record. This allows you to specify the users to which the restriction applies and control what happens when the application is opened by those users. For instance, you can kill the restricted process, delete the application, and even display a message to the user.
Creating A Restricted Software Record
In Jamf Pro, click Computers at the top of the sidebar.
Click Restricted Software in the sidebar.
Click New.
Enter a display name in the Display Name field.
In the Process Name field, enter the exact name of the file you want to restrict.
For helping finding the process name, see: https://learn.jamf.com/bundle/technical-articles/page/Finding_the_Name_of_Processes_When_Configuring_Restricted_Software.html
Configure the restricted software record using the fields and options on the pane. To enable email notifications, select the Send email notification on violation checkbox.
For most environments, it is recommended to select the Kill Process checkbox at a minimum to ensure that the process is terminated when it is found.
Click the Scope tab and configure the scope of the restricted software record.
Click Save.
The restriction is applied to computers in the scope the next time they check in with Jamf Pro. You can run sudo jamf manage in Terminal on the computer to apply the restriction.
Important to note:
Please be aware that Native Apple Applications such as Books, Chess, Mail etc. cannot be deleted through the "Delete application" feature, as native Apple applications cannot be removed.