Restricting apps for domain users

[Nimraynn]

Hello,

I'm part of a desktop support team and we've got a new user that is going to be using an iMac. Now we are a 99.9% Windows XP & Windows Server 2003 network, in fact, I think this is the one and only Mac we use... and as such, we don't know much about setting it up. I use an iMac at home so I know the basics, but never used one on a corporate network..

Just wanted one or two quick pointers.

I've managed to set it up on our Active Directory domain, done a few basic security measures, but I want to be able to restrict non-admin users from being able to use certain bundled apps, such as the App Store. I can see that everything we want to do is available in the "Parental Controls" feature in System Preferences, but I can't seem to work out how I can set this up for a network/domain account, or preferably for anyone who isn't in a specific group.

Any ideas?

Cheers.

 

[MacsWork]

Ideally you would use an OS X server and create a dual directory login between OD and AD. Then use the OS X server preferences to block the apps. Similar to group policy. Because AD cannot manage OS X machines you need the OS X server to assist with that. For one user it might be overkill, but it depends on the company policy.

 

[Nimraynn]

Thanks for the reply. I thought that might be the case. Our management are such tight wads it's hard enough trying to get a Windows server out of them, let alone an OS X server

They were even skeptical about letting someone have an iMac, but they came to an agreement that we won't support it. They can have it, but if they break it, that's their problem, not ours... which is all well and good, but they didn't seem to think about how we would go about setting it up for them in the first place... Our management's usual problem.

I think one of the major issues is the Mac App Store. Is there any safe way to remove this?

And thinking about it, if the user isn't an admin, will they be able to install applications anyway? Would this technically render the App Store pretty useless?

 

[MacsWork]

Honestly,...If you are the IT department and really want to block the App Store, I would do it via DNS and Firewall rules.

Problem Solved.

 

[Nimraynn]

That's a good point, hadn't thought of that. Now you say it, I'm not sure if it'll even work with the way our network is setup.

I'll give it a go on Monday when I'm back in the office. Cheers