Application Control

Configuration settings

Edit

Gatekeeper

Allow apps downloaded from these locations Mac App Store

Do not allow user to override Gatekeeper Yes

User Application Hardening

Chrome

Preference domain name com.google.Chrome

Property list file 

<key>AdsSettingForIntrusiveAdsSites</key>

<integer>2</integer>

Microsoft Edge

Ads setting for sites with intrusive ads Block ads on sites with intrusive ads. (Default value)

Default JavaScript setting Don’t allow any site to run JavaScript

Macros

Microsoft Office

Configure the Microsoft Office preference settings to control diagnostic data that is collected and sent to Microsoft about Office client software being used as well as connected experiences that use cloud-based functionality to provide enhanced Office features to you and your users.

Allow macros to modify Visual Basic projects False

Allow Visual Basic macros to use system APIs False

Prevent all Visual Basic macros from executing True

Prevent Visual Basic macros from using external dynamic libraries True

Prevent Visual Basic macros from using legacy MacScript True

Prevent Visual Basic macros from using pipes to communicate True

Visual Basic macro policy – Disable all macros