JAMF Nation, hosted by JAMF Software, is a dynamic and knowledgeable community of Apple-focused IT admins and Casper Suite users. Join us in person, in October, for the annual JAMF Nation User Conference (JNUC) to discover new and better ways to manage Apple devices.

CCT Badge CCA Badge

Composer Opening Error - Folder Whitelist MCX

Posted: 2/9/12 at 5:48 AM by chrispike

Hello all,

I have applied the Folder Whitelist MCX setting under com.apple.applicationaccess.new to only allow Applications to launch from the following folders:


However when I log in with my _localadmin account and try to run Composer from within the Applications directory I get the following error with the options to 'Always Allow...', 'Allow Once...', and 'OK'.

You don't have permission to use the application "jamf-relauncher".

Clicking on 'Always Allow' or 'Allow Once' and entering the admin password just bring the error back.

This mailing list has been massively helpful since we started using Casper and I thought someone on here might have a quick answer!



Posted: 2/9/12 at 12:08 PM by acdesigntech

My organization also uses a whitelist/blacklist, but it's only to blacklist one app \- FontBook. However, per JAMF support you need to add keys for family controls, whitelist, AND blacklist. I've linked to images hosted on my wordpress blog so you can get the full picture.

You might want to consider allowing apps to launch from the entire /usr directory since you also have libexec, bin, etc under /usr.


CCT Badge CCA Badge

Posted: 2/10/12 at 3:33 AM by chrispike

Thank you for your reply but I am getting a 'Page not found' error on your links?

Posted: 2/10/12 at 5:44 AM by acdesigntech

Hmmm, i wrote an article last night about it on my blog: http://acdesigntech.wordpress.com/2012/02/09/using-managed-preferences-mcx-to-blacklist-applications

Try that

CCT Badge CCA Badge

Posted: 2/10/12 at 7:27 AM by chrispike

Thank you, very useful.