3 Replies Latest reply: Sep 20, 2012 6:12 PM by Strontium90
sonicsoul Level 1 Level 1 (0 points)

Hello

 

I thought this would be a prominent feature in Profile Manager, but I guess not.

 

Is it possible to block Mac App Store and iTunes Store access on client Macs?  If not via Profile Manager, than what's an accepted way to accomplish this?

 

Thanks for any help.

 

Ron L

  • 1. Re: Prevent App Store and iTunes Store access on Macs
    Strontium90 Level 4 Level 4 (3,140 points)

    A simple method of the App Store is to just move the application out of the Application's folder and store it on the local admin's Desktop.  The managed user will have no access to the app and thus will not be able to use it.

     

    For iTunes, take a look at iTunes > Preferences > Parental.  There is an option in there to disable iTunes Store access.  Make the change, isolate the preference and push through management console.

  • 2. Re: Prevent App Store and iTunes Store access on Macs
    sonicsoul Level 1 Level 1 (0 points)

    Thanks so much!  The App Store solution makes sense, I'll definitely do that.

     

    How can one "isolate the preference and push thorugh management console" though?  I'm unaware of how to manage app sepcific preferences (sorry, brand new OS X admin here).

     

    Ron

  • 3. Re: Prevent App Store and iTunes Store access on Macs
    Strontium90 Level 4 Level 4 (3,140 points)

     

    How can one "isolate the preference and push thorugh management console" though?  I'm unaware of how to manage app sepcific preferences (sorry, brand new OS X admin here).

     

    Ron

     

    The file is com.apple.iTunes.plist which is stored on a per user basis.  The key is:

     

    <key>disableMusicStore</key>

     

    This needs to be set to true. 

     

    What are you using to image the machines and what are you using to manage then after the fact?  If doing monolithic imaging, add this to the English User Template and then all new accounts will inherit.  If adding to systems post, you can use MCX (although this is depreciated and your success may vary).  If you have Apple Remote Desktop, you could send out to all users to dynamically set it.  If you use JAMF you can establish a policy to keep it enforced.