This is what user will be seeing when opening a blocked app. Administrator can also see the app blocking activities from UEM console.
Wondering how to get Apps blocked on a MacOS device? Here are the steps:
Create a custom profile to get app blocking enabled
1. EnableMacFeatureFlag XML
<dict>
<key>FeatureFlags</key>
<dict>
<key>MacOsAppRestrictionsFeatureFlag</key>
<true/>
</dict>
<key>PayloadDisplayName</key>
<string>App Restrictions Feature Flag</string>
<key>PayLoadIdentifier</key> <string>VMware.HubSetting.93f1655a-59fb-42dc-bc31-9571275cb12b</string> <key>PayloadOrganization</key>
<string>VMware</string>
<key>PayLoadType</key>
<string>com.vmware.hub.mac</string>
<key>PayloadUUID</key> <string>1D7F0D18-369B-4766-9CA0-D2B4537657C1</string> <key>PayloadVersion</key>
<integer>1</integer>
</dict>
3. Restrict app by bundle ID
2. EnableSystemExtension
3. Create a cutom profile to get an app blcoked by bundle ID
<dict> <key>Restrictions</key> <array>
<dict> <key>Attributes</key> <dict>
<key>cdhash</key> <string>08927ff6ef205a9445128728142610c3f94f6455</string> <key>name</key>
<string>WhatsApp</string>
<key>path</key> <string>/Applications/WhatsApp.app/Contents/MacOS/WhatsApp</string> <key>bundleId</key>
<string>WhatsApp</string>
</dict> <key>Actions</key> <array>
<integer>1</integer>
</array>
<key>Message</key>
<string>WhatsApp is not allowed to run in our organisation</string>
</dict>
</array>
<key>PayloadDisplayName</key>
<string>Intelligent Hub</string>
<key>PayloadIdentifier</key> <string>VMware.HubSettings.93f1655a-59fb-42dc-bc31-9571275cb12b</string> <key>PayloadOrganization</key>
<string />
<key>PayloadType</key>
<string>com.vmware.hub.mac.restrictions</string>
<key>PayloadUUID</key> <string>1D7F0D19-369B-4766-9CA0-D2B4537657C1</string> <key>PayloadVersion</key>
<integer>1</integer>
</dict>
Comments