Restricted software allows you to prevent users or groups of users from accessing certain applications. For instance, you might want to prevent all users from accessing a peer-to-peer file sharing application, restrict everyone except the IT staff from accessing common administrative utilities, or restrict users from installing a software beta version.
For each application that you want to restrict, you must create a restricted software record. This allows you to specify the users to which the restriction applies and control what happens when the application is opened by those users. For instance, you can kill the restricted process, delete the application, and even display a message to the user.
If there is an SMTP server set up in Jamf Pro, you can enable email notifications for the restricted software record. This allows email notifications to be sent to Jamf Pro users each time a violation occurs. For information on setting up an SMTP server and enabling email notifications for Jamf Pro user accounts, see Integrating with an SMTP Server and Email Notifications.
Creating a Restricted Software Record
Log in to Jamf Pro.
Click Computers at the top of the page.
Click Restricted Software.
Click New .
Enter a display name in the Display Name field.
In the Process Name field, enter the exact name of the file you want to restrict.
For more information, see the Finding the Name of Processes When Configuring Restricted Software Knowledge Base article.
Note: It is recommended that you restrict the name of the application bundle when restricting a process in an application bundle. For example: "Chess.app".
Configure the restricted software record using the fields and options on the pane.
To enable email notifications, select the Send email notification on violation checkbox.
Note: For most environments, it is recommended to select the Kill Process checkbox at a minimum to ensure that the process is terminated when it is found.
Click the Scope tab and configure the scope of the restricted software record.
For more information, see Scope.
Click Save .
The restriction is applied to computers in the scope the next time they check in with Jamf Pro.
For related information, see the following section in this guide:
Viewing Restricted Software for a Computer
Find out how to view the restricted software for a computer.
For related information, see the following Best Practice Workflow for Jamf Pro:
Deferring a macOS Update
Find out how to defer a macOS update.
For related information, see the following Knowledge Base article:
Finding the Name of Processes When Configuring Restricted Software
Learn how to find the exact name of the process you want create restricted software for.