{"id":6943,"date":"2023-06-05T21:45:09","date_gmt":"2023-06-05T21:45:09","guid":{"rendered":"https:\/\/pariswells.com\/blog\/?p=6943"},"modified":"2023-06-05T21:45:12","modified_gmt":"2023-06-05T21:45:12","slug":"applockercontrol-for-mac","status":"publish","type":"post","link":"https:\/\/pariswells.com\/blog\/research\/applockercontrol-for-mac","title":{"rendered":"AppLocker\\Control for MAC"},"content":{"rendered":"\n<h2 class=\"wp-block-heading\">Default Intune Mac OS App Control<a href=\"https:\/\/learn.microsoft.com\/en-us\/mem\/intune\/configuration\/device-restrictions-macos#settings-apply-to-all-enrollment-types-6\"><\/a><\/h2>\n\n\n\n<h6 class=\"wp-block-heading\" id=\"settings-apply-to-all-enrollment-types-6\">Restricted apps Settings apply to: All enrollment types<\/h6>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Type of restricted apps list<\/strong>: Create a list of apps that users aren&#8217;t allowed to install or use. Your options:\n<ul class=\"wp-block-list\">\n<li><strong>Not configured<\/strong>&nbsp;(default): Intune doesn&#8217;t change or update this setting. By default, users might have access to apps you assign, and built-in apps.<\/li>\n\n\n\n<li><strong>Approved apps<\/strong>: List the apps that users are allowed to install. Users must not install other apps. If users install apps that aren&#8217;t allowed, then it&#8217;s reported in Intune. Apps that are managed by Intune are automatically allowed, including the Company Portal app. Users aren&#8217;t prevented from installing an app that isn&#8217;t on the approved list.<\/li>\n\n\n\n<li><strong>Prohibited apps<\/strong>: List the apps (not managed by Intune) that users aren&#8217;t allowed to install and run. <strong>Users aren&#8217;t prevented from installing a prohibited app. If a user installs an app from this list, it&#8217;s reported in Intune.<\/strong><\/li>\n<\/ul>\n<\/li>\n<\/ul>\n\n\n\n<h2 class=\"wp-block-heading\"><strong>Google&#8217;s Tools Santa<\/strong><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\"><a href=\"https:\/\/github.com\/google\/santa\">https:\/\/github.com\/google\/santa<\/a> ( <a href=\"https:\/\/support.addigy.com\/hc\/en-us\/articles\/4403720154387-Deploying-Google-Santa-Using-Addigy#Applying-a-Rule\">https:\/\/support.addigy.com\/hc\/en-us\/articles\/4403720154387-Deploying-Google-Santa-Using-Addigy#Applying-a-Rule<\/a> ) <\/p>\n\n\n\n<p class=\"wp-block-paragraph\">\u00a0<a href=\"https:\/\/github.com\/google\/upvote\" target=\"_blank\" rel=\"noreferrer noopener\">Upvote<\/a>\u00a0(whitelist server for Santa)<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">JAMF Pro<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">JAMF Pro has the ability Blacklist applications. JAMF Pro is the closest any MDM will get to App Control. JAMF does this with the JAMF Binary which gives control options over the Mac that are outside of Apples MDM framework. To be clear, JAMF Pro is not a security tool. It is just another MDM (far better than intune for Macs) that can do some extra tricks.<\/p>\n\n\n\n<h2 class=\"wp-block-heading\">Set Gatekeeper to App Store only<\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Set Gatekeeper to App Store only and use managed apple ids &#8211; OK and use MDM to deploy apps that are not in the App Store, which I see in the documentation bypasses GateKeeper.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\"><strong>Intune: <\/strong><\/p>\n\n\n\n<ul class=\"wp-block-list\">\n<li><strong>Allow apps downloaded from these locations<\/strong> Limit the apps a device can launch, depending on where the apps were downloaded from. The intent is to protect devices from malware, and allow apps from only the sources you trust.\n<ul class=\"wp-block-list\">\n<li><strong>Not configured<\/strong>&nbsp;(<em>default<\/em>)<\/li>\n\n\n\n<li><strong>Mac App Store<\/strong><\/li>\n\n\n\n<li><strong>Mac App Store and identified developers<\/strong><\/li>\n\n\n\n<li><strong>Anywhere<\/strong><\/li>\n<\/ul>\n<\/li>\n\n\n\n<li><strong>Do not allow user to override Gatekeeper<\/strong>Prevents users from overriding the Gatekeeper setting, and prevents users from Control-clicking to install an app. When enabled, users can&#8217;t Control-click any app to install it.\n<ul class=\"wp-block-list\">\n<li><strong>Not configured<\/strong>&nbsp;(<em>default<\/em>) &#8211; Users can Control-click to install apps.<\/li>\n\n\n\n<li><strong>Yes<\/strong>&nbsp;&#8211; Prevents users from using Control-click to install apps.<\/li>\n<\/ul>\n<\/li>\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Default Intune Mac OS App Control Restricted apps Settings apply to: All enrollment types Google&#8217;s Tools Santa https:\/\/github.com\/google\/santa ( https:\/\/support.addigy.com\/hc\/en-us\/articles\/4403720154387-Deploying-Google-Santa-Using-Addigy#Applying-a-Rule ) \u00a0Upvote\u00a0(whitelist server for Santa) JAMF Pro [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[],"class_list":["post-6943","post","type-post","status-publish","format-standard","hentry","category-research"],"aioseo_notices":[],"aioseo_head":"\n\t\t<!-- All in One SEO 4.9.8 - aioseo.com -->\n\t<meta name=\"description\" content=\"Default Intune Mac OS App Control Restricted apps Settings apply to: All enrollment types Type of restricted apps list: Create a list of apps that users aren&#039;t allowed to install or use. Your options: Not configured (default): Intune doesn&#039;t change or update this setting. By default, users might have access to apps you assign, and built-in\" \/>\n\t<meta name=\"robots\" content=\"max-image-preview:large\" \/>\n\t<meta name=\"author\" content=\"paris\"\/>\n\t<link rel=\"canonical\" href=\"https:\/\/pariswells.com\/blog\/research\/applockercontrol-for-mac\" \/>\n\t<meta name=\"generator\" content=\"All in One SEO (AIOSEO) 4.9.8\" \/>\n\t\t<meta property=\"og:locale\" content=\"en_US\" \/>\n\t\t<meta property=\"og:site_name\" content=\"Welcome to Pariswells.com |\" \/>\n\t\t<meta property=\"og:type\" content=\"article\" \/>\n\t\t<meta property=\"og:title\" content=\"AppLocker\\Control for MAC | Welcome to Pariswells.com\" \/>\n\t\t<meta property=\"og:description\" content=\"Default Intune Mac OS App Control Restricted apps Settings apply to: All enrollment types Type of restricted apps list: Create a list of apps that users aren&#039;t allowed to install or use. Your options: Not configured (default): Intune doesn&#039;t change or update this setting. By default, users might have access to apps you assign, and built-in\" \/>\n\t\t<meta property=\"og:url\" content=\"https:\/\/pariswells.com\/blog\/research\/applockercontrol-for-mac\" \/>\n\t\t<meta property=\"article:published_time\" content=\"2023-06-05T21:45:09+00:00\" \/>\n\t\t<meta property=\"article:modified_time\" content=\"2023-06-05T21:45:12+00:00\" \/>\n\t\t<meta name=\"twitter:card\" content=\"summary\" \/>\n\t\t<meta name=\"twitter:title\" content=\"AppLocker\\Control for MAC | Welcome to Pariswells.com\" \/>\n\t\t<meta name=\"twitter:description\" content=\"Default Intune Mac OS App Control Restricted apps Settings apply to: All enrollment types Type of restricted apps list: Create a list of apps that users aren&#039;t allowed to install or use. Your options: Not configured (default): Intune doesn&#039;t change or update this setting. By default, users might have access to apps you assign, and built-in\" \/>\n\t\t<script type=\"application\/ld+json\" class=\"aioseo-schema\">\n\t\t\t{\"@context\":\"https:\\\/\\\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/research\\\/applockercontrol-for-mac#article\",\"name\":\"AppLocker\\\\Control for MAC | Welcome to Pariswells.com\",\"headline\":\"AppLocker\\\\Control for MAC\",\"author\":{\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/author\\\/paris#author\"},\"publisher\":{\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/#organization\"},\"datePublished\":\"2023-06-05T21:45:09+00:00\",\"dateModified\":\"2023-06-05T21:45:12+00:00\",\"inLanguage\":\"en-US\",\"mainEntityOfPage\":{\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/research\\\/applockercontrol-for-mac#webpage\"},\"isPartOf\":{\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/research\\\/applockercontrol-for-mac#webpage\"},\"articleSection\":\"Research\"},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/research\\\/applockercontrol-for-mac#breadcrumblist\",\"itemListElement\":[{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog#listItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\\\/\\\/pariswells.com\\\/blog\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/category\\\/research#listItem\",\"name\":\"Research\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/category\\\/research#listItem\",\"position\":2,\"name\":\"Research\",\"item\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/category\\\/research\",\"nextItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/research\\\/applockercontrol-for-mac#listItem\",\"name\":\"AppLocker\\\\Control for MAC\"},\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog#listItem\",\"name\":\"Home\"}},{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/research\\\/applockercontrol-for-mac#listItem\",\"position\":3,\"name\":\"AppLocker\\\\Control for MAC\",\"previousItem\":{\"@type\":\"ListItem\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/category\\\/research#listItem\",\"name\":\"Research\"}}]},{\"@type\":\"Organization\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/#organization\",\"name\":\"Welcome to Pariswells.com\",\"url\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/\"},{\"@type\":\"Person\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/author\\\/paris#author\",\"url\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/author\\\/paris\",\"name\":\"paris\",\"image\":{\"@type\":\"ImageObject\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/research\\\/applockercontrol-for-mac#authorImage\",\"url\":\"https:\\\/\\\/secure.gravatar.com\\\/avatar\\\/93b8ee3f592ac401167f870452bd82d43de80152cd3524e2853403658ada9984?s=96&d=mm&r=g\",\"width\":96,\"height\":96,\"caption\":\"paris\"}},{\"@type\":\"WebPage\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/research\\\/applockercontrol-for-mac#webpage\",\"url\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/research\\\/applockercontrol-for-mac\",\"name\":\"AppLocker\\\\Control for MAC | Welcome to Pariswells.com\",\"description\":\"Default Intune Mac OS App Control Restricted apps Settings apply to: All enrollment types Type of restricted apps list: Create a list of apps that users aren't allowed to install or use. Your options: Not configured (default): Intune doesn't change or update this setting. By default, users might have access to apps you assign, and built-in\",\"inLanguage\":\"en-US\",\"isPartOf\":{\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/#website\"},\"breadcrumb\":{\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/research\\\/applockercontrol-for-mac#breadcrumblist\"},\"author\":{\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/author\\\/paris#author\"},\"creator\":{\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/author\\\/paris#author\"},\"datePublished\":\"2023-06-05T21:45:09+00:00\",\"dateModified\":\"2023-06-05T21:45:12+00:00\"},{\"@type\":\"WebSite\",\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/#website\",\"url\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/\",\"name\":\"Welcome to Pariswells.com\",\"inLanguage\":\"en-US\",\"publisher\":{\"@id\":\"https:\\\/\\\/pariswells.com\\\/blog\\\/#organization\"}}]}\n\t\t<\/script>\n\t\t<!-- All in One SEO -->\n\n","aioseo_head_json":{"title":"AppLocker\\Control for MAC | Welcome to Pariswells.com","description":"Default Intune Mac OS App Control Restricted apps Settings apply to: All enrollment types Type of restricted apps list: Create a list of apps that users aren't allowed to install or use. Your options: Not configured (default): Intune doesn't change or update this setting. By default, users might have access to apps you assign, and built-in","canonical_url":"https:\/\/pariswells.com\/blog\/research\/applockercontrol-for-mac","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/pariswells.com\/blog\/research\/applockercontrol-for-mac#article","name":"AppLocker\\Control for MAC | Welcome to Pariswells.com","headline":"AppLocker\\Control for MAC","author":{"@id":"https:\/\/pariswells.com\/blog\/author\/paris#author"},"publisher":{"@id":"https:\/\/pariswells.com\/blog\/#organization"},"datePublished":"2023-06-05T21:45:09+00:00","dateModified":"2023-06-05T21:45:12+00:00","inLanguage":"en-US","mainEntityOfPage":{"@id":"https:\/\/pariswells.com\/blog\/research\/applockercontrol-for-mac#webpage"},"isPartOf":{"@id":"https:\/\/pariswells.com\/blog\/research\/applockercontrol-for-mac#webpage"},"articleSection":"Research"},{"@type":"BreadcrumbList","@id":"https:\/\/pariswells.com\/blog\/research\/applockercontrol-for-mac#breadcrumblist","itemListElement":[{"@type":"ListItem","@id":"https:\/\/pariswells.com\/blog#listItem","position":1,"name":"Home","item":"https:\/\/pariswells.com\/blog","nextItem":{"@type":"ListItem","@id":"https:\/\/pariswells.com\/blog\/category\/research#listItem","name":"Research"}},{"@type":"ListItem","@id":"https:\/\/pariswells.com\/blog\/category\/research#listItem","position":2,"name":"Research","item":"https:\/\/pariswells.com\/blog\/category\/research","nextItem":{"@type":"ListItem","@id":"https:\/\/pariswells.com\/blog\/research\/applockercontrol-for-mac#listItem","name":"AppLocker\\Control for MAC"},"previousItem":{"@type":"ListItem","@id":"https:\/\/pariswells.com\/blog#listItem","name":"Home"}},{"@type":"ListItem","@id":"https:\/\/pariswells.com\/blog\/research\/applockercontrol-for-mac#listItem","position":3,"name":"AppLocker\\Control for MAC","previousItem":{"@type":"ListItem","@id":"https:\/\/pariswells.com\/blog\/category\/research#listItem","name":"Research"}}]},{"@type":"Organization","@id":"https:\/\/pariswells.com\/blog\/#organization","name":"Welcome to Pariswells.com","url":"https:\/\/pariswells.com\/blog\/"},{"@type":"Person","@id":"https:\/\/pariswells.com\/blog\/author\/paris#author","url":"https:\/\/pariswells.com\/blog\/author\/paris","name":"paris","image":{"@type":"ImageObject","@id":"https:\/\/pariswells.com\/blog\/research\/applockercontrol-for-mac#authorImage","url":"https:\/\/secure.gravatar.com\/avatar\/93b8ee3f592ac401167f870452bd82d43de80152cd3524e2853403658ada9984?s=96&d=mm&r=g","width":96,"height":96,"caption":"paris"}},{"@type":"WebPage","@id":"https:\/\/pariswells.com\/blog\/research\/applockercontrol-for-mac#webpage","url":"https:\/\/pariswells.com\/blog\/research\/applockercontrol-for-mac","name":"AppLocker\\Control for MAC | Welcome to Pariswells.com","description":"Default Intune Mac OS App Control Restricted apps Settings apply to: All enrollment types Type of restricted apps list: Create a list of apps that users aren't allowed to install or use. Your options: Not configured (default): Intune doesn't change or update this setting. By default, users might have access to apps you assign, and built-in","inLanguage":"en-US","isPartOf":{"@id":"https:\/\/pariswells.com\/blog\/#website"},"breadcrumb":{"@id":"https:\/\/pariswells.com\/blog\/research\/applockercontrol-for-mac#breadcrumblist"},"author":{"@id":"https:\/\/pariswells.com\/blog\/author\/paris#author"},"creator":{"@id":"https:\/\/pariswells.com\/blog\/author\/paris#author"},"datePublished":"2023-06-05T21:45:09+00:00","dateModified":"2023-06-05T21:45:12+00:00"},{"@type":"WebSite","@id":"https:\/\/pariswells.com\/blog\/#website","url":"https:\/\/pariswells.com\/blog\/","name":"Welcome to Pariswells.com","inLanguage":"en-US","publisher":{"@id":"https:\/\/pariswells.com\/blog\/#organization"}}]},"og:locale":"en_US","og:site_name":"Welcome to Pariswells.com |","og:type":"article","og:title":"AppLocker\\Control for MAC | Welcome to Pariswells.com","og:description":"Default Intune Mac OS App Control Restricted apps Settings apply to: All enrollment types Type of restricted apps list: Create a list of apps that users aren't allowed to install or use. Your options: Not configured (default): Intune doesn't change or update this setting. By default, users might have access to apps you assign, and built-in","og:url":"https:\/\/pariswells.com\/blog\/research\/applockercontrol-for-mac","article:published_time":"2023-06-05T21:45:09+00:00","article:modified_time":"2023-06-05T21:45:12+00:00","twitter:card":"summary","twitter:title":"AppLocker\\Control for MAC | Welcome to Pariswells.com","twitter:description":"Default Intune Mac OS App Control Restricted apps Settings apply to: All enrollment types Type of restricted apps list: Create a list of apps that users aren't allowed to install or use. Your options: Not configured (default): Intune doesn't change or update this setting. By default, users might have access to apps you assign, and built-in"},"aioseo_meta_data":{"post_id":"6943","title":null,"description":null,"keywords":[],"keyphrases":{"focus":{"keyphrase":"","score":0,"analysis":{"keyphraseInTitle":{"score":0,"maxScore":9,"error":1}}},"additional":[]},"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":"","og_custom_url":null,"og_article_section":null,"og_article_tags":[],"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":"default","schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":"-1","robots_max_videopreview":"-1","robots_max_imagepreview":"large","priority":null,"frequency":"default","location":null,"local_seo":null,"breadcrumb_settings":null,"limit_modified_date":false,"ai":null,"created":"2023-06-05 06:25:03","updated":"2023-06-05 21:48:39","primary_term":null,"seo_analyzer_scan_date":null},"aioseo_breadcrumb":"<div class=\"aioseo-breadcrumbs\"><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/pariswells.com\/blog\" title=\"Home\">Home<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\t<a href=\"https:\/\/pariswells.com\/blog\/category\/research\" title=\"Research\">Research<\/a>\n\t\t<\/span><span class=\"aioseo-breadcrumb-separator\">&raquo;<\/span><span class=\"aioseo-breadcrumb\">\n\t\t\tAppLocker\\Control for MAC\n\t\t<\/span><\/div>","aioseo_breadcrumb_json":[{"label":"Home","link":"https:\/\/pariswells.com\/blog"},{"label":"Research","link":"https:\/\/pariswells.com\/blog\/category\/research"},{"label":"AppLocker\\Control for MAC","link":"https:\/\/pariswells.com\/blog\/research\/applockercontrol-for-mac"}],"_links":{"self":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/6943","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/comments?post=6943"}],"version-history":[{"count":2,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/6943\/revisions"}],"predecessor-version":[{"id":6945,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/posts\/6943\/revisions\/6945"}],"wp:attachment":[{"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/media?parent=6943"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/categories?post=6943"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/pariswells.com\/blog\/wp-json\/wp\/v2\/tags?post=6943"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}