I have a computer lab at a school that is running Snow Leopard and a Snow Leopard server. Is there a way in Workgroup Manager to disallow the student group from running an installed application? I know that I can "always allow" all the rest of the applications, but there is just one that I specifically want to disallow and I don't want to have to be constantly updating an application whitelist.
Hang an ACL off the bundle and — presuming your students are all associated with a group I'll refer to as "student" group — use the ACL to deny access to anybody in "student"? That's sort-of and sort-of-not WGM, but it'll work.