Mac OS X 10.3, 10.4: Preventing users from opening non-approved applications via a URL

Issue or solution

Users can be restricted from opening certain applications using Parental Controls and Workgroup Manager but applications will still be able to open and launch restricted applications. Opening an application from another application is called "sub-launching".

Solution

On Mac OS X 10.3 or later-based computers bound to Mac OS X Server, you can allow or disallow sub-launching by using the following steps on the server:

1. In Workgroup Manager, select a user, group, or computer list.
2. Click Preferences, then Applications.
3. Select the "Allow approved applications to launch non-approved applications" checkbox to enable sub-launching, or deselect the option to disable it.

On Macintosh computers running Mac OS X 10.4 or later, you can use Parental Controls in Accounts preferences to disable sub-launching. Deselect the "Allow supporting programs" checkbox (in Finder & System).

Note: On Mac OS X 10.3-based client computers, sub-launching cannot be disabled through System Preferences.