Allowed Application Directories

[RhysAndrews]

Hey there,
I'm using managed preferences to prevent any unauthorised applications from being run on any machine in our organisation. To do this, I added /applications to the allowed list and set the permissions so that only I can add new applications to the folder on each local machine.

I also added "/system/library" and "/library" for any background services which need to run. The issue is, I'm still getting messages saying an application cannot be run because it's not allowed - these are background applications that I do want to allow.

One includes "Run" which pops up whenever I try to open an important java applet. Another is "install" which pops up as soon as someone logs in. I don't know where these applications are!

I'd appreciate any help you can throw at me - thanks!
-Rhys