Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

Restricting access to certain non-standard applications OS X Server
I have a Server with Mac OS X Server 10.2 on it. And I wanted to restrict what kind of applications some of my users could use. With all built-in Apple apps, and most everyone else's programs, it's no problem. Just restrict access to everything, then allow the apps you want them to use.

But with some apps, like CoooL and R-Name, when I add these applications, this shows up in my allow list: Then I can't separate those two apps from each other, or other apps with the same behavior.

The fix for this is to show the contents of the application (control-click on the application, then select Show Package Contents), then edit the /Contents -> Info.plist file using Property List Editor, or the text editor of your choice. In Property List Editor, create a new child. Call the Property CFBundleIdentifier, the Class is String, and the Value is the name of the application. Save it, then try to re-add the app to Workgroup Manager, and look at that beauty! It should work as expected now.
  • Currently 1.71 / 5
  You rated: 1 / 5 (7 votes cast)

Restricting access to certain non-standard applications | 2 comments | Create New Account
Click here to return to the 'Restricting access to certain non-standard applications' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
Restricting access to certain non-standard applications
Authored by: BMarsh on Jan 24, '05 08:23:04PM

An alternate way of doing this (Tested in 10.3 & 10.2, non-server)

Setting a Bundle Identifier

this will fix applications that will not stay checked in the Accounts Panel (Users in 10.2), then the Limits section.

you go to the actual application, right-click "Show Package Contents"

go into "Contents"

drag "info.plist" onto TextEdit (as the hint I put this reply in mentions, you could also use the Property List Editing program)

look through for the following line (usually near the beginning, or the end of the info.plist file from what I've seen)


(and it's <string>whatever</string>)

after those 2 lines insert the following


this identifies the program properly for Multiple Users so a limited account can use the program. (the com could be a country code, net or other)

save, and close all the windows.

if System Preferences are still open, quit it, and then run it again, you should now be able to select the program, and it will stay checked.

[ Reply to This | # ]
Restricting access to certain non-standard applications
Authored by: yellow#5 on Feb 25, '05 02:04:01PM

I run a blacklist of blocked apps as opposed to a white list of allowed ones, and this doesn't work for blocking apps. It will only block the ones with changed creator codes, which doesn't stop people from using a game that they brought in on a CD they burned at home.

So is anyone aware of a workaround that may prevent the launching of apps that only show up as

[ Reply to This | # ]