topic Re: macOS: Block/prevent already installed apps from running via Workspace ONE? in Workspace ONE Discussions

macOS: Block/prevent already installed apps from running via Workspace ONE?

GottliebLoch — Wed, 22 Apr 2020 09:18:42 GMT

Hello,

Do you know of a way (e.g. a custom profile/payload) to completely block/prevent a certain already installed app (like Zoom.us) on an Apple macOS device from running?

Many thanks for your help!

Best regards,

Re: macOS: Block/prevent already installed apps from running via Workspace ONE?

lazyGhost — Mon, 04 May 2020 18:23:20 GMT

You'll need something like Santa:

GitHub - google/santa: A binary whitelisting/blacklisting system for macOS

Re: macOS: Block/prevent already installed apps from running via Workspace ONE?

xiaogui2005 — Thu, 27 Aug 2020 10:10:06 GMT

Look forward to the function of wsone application process checking and killing, which comes with wsone instead of Santa.

Re: macOS: Block/prevent already installed apps from running via Workspace ONE?

ralbertodacu — Sat, 29 Aug 2020 18:31:51 GMT

If you create a Restrictions Profile, there's the option "Restrict which applications are allowed to launch" which let's you Disallow Folders.

Given that the ".app" files you see on your /Applications folder are technically folders as well, you can disallow an App by pointing to it (e.g. "/Applications/FaceTime.app").

This will not remove or hide the App from the device, but it will require an Admin account in order for the app to be launched.

Hope this helps.

Raul Cunha

Re: macOS: Block/prevent already installed apps from running via Workspace ONE?

PhabFilzer — Thu, 28 Jul 2022 10:26:28 GMT

That is a good hint, unfortunately app's doesn't act like folders, so it doesn't touch them at all. Also, if this option is activated, the Workspace One Intelligent HUB is not installed under certain profile conditions with "Restrictions" in the enrollment, or it avoids it from working.