Restricted software allows you to prevent users or groups of users from accessing certain applications. For instance, you might want to prevent all users from accessing a peer-to-peer file sharing application, restrict everyone except the IT staff from accessing common administrative utilities, or restrict users from installing a software beta version.
For each application that you want to restrict, you must create a restricted software record. This allows you to specify the users to which the restriction applies and control what happens when the application is opened by those users. For instance, you can kill the restricted process, delete the application, and even display a message to the user.
You can configure email notifications for a restricted software record so that Jamf Pro users are notified each time a violation occurs. To enable email notifications for a restricted software record, you need:
Creating a Restricted Software Record
Log in to Jamf Pro.
Click Computers at the top of the page.
Click Restricted Software.
Click New .
Enter a display name in the Display Name field.
In the Process Name field, enter the exact name of the file you want to restrict.
Note: It is recommended that you restrict the name of the application bundle when restricting a process in an application bundle. For example: "Chess.app".
Configure the restricted software record using the fields and options on the pane.
To enable email notifications, select the Send email notification on violation checkbox.
Note: For most environments, it is recommended to select the Kill Process checkbox at a minimum to ensure that the process is terminated when it is found.
Click the Scope tab and configure the scope of the restricted software record.
Click Save .
The restriction is applied to computers in the scope the next time they check in with Jamf Pro.
For related information, see the following section in this guide:
Viewing Restricted Software for a Computer
Find out how to view the restricted software for a computer.
For related information, see the following Best Practice Workflow for Jamf Pro:
Deferring a macOS Update
Find out how to defer a macOS update.
For related information, see the following Knowledge Base article:
Finding the Name of Processes When Configuring Restricted Software
Learn how to find the exact name of the process you want to create restricted software for.