End User Computing

Lab 12: Configure an Advanced Security Controls profile

You create an Advanced Security Controls profile to restrict the launch of specific applications.

In the Workspace ONE console, select Resources. Expand Profiles & Baselines. Then click Profiles.
From the Add drop-down menu, select Add Profile.
Select the Profile Platform by clicking Apple macOS.
For the Management Type, select Imperative.
Select Device for the profile Context.
Click Next.
Enter macOS – App Restrictions for the profile name.
Scroll down the list of payloads until you find Advanced Security Controls. Click Add.
Under Bundle IDs, enter com.google.Chrome.
Under Names, enter Audacity.
Under CD Hash values, enter the CD Hash for Keynote. At the time this document was written, the CD Hash for Keynote was 4018b8220285d74951c40f349bf97373d296dd75.
For Display message dialogue when blocked, click Enable.
In the Message field, enter This application is restricted.
Click Next.
Click on the line next to Smart Group, and select Corporate-owned macOS Devices.
Select Auto for the Assignment Type.
Select Never for Allow Removal.
Click Save & Publish.