So I haven’t let y’all know, but a month ago I was hired to do techy-teachy stuff at the UN (yay!), and particularly Mac stuff. This is quite a jump from being a JHS teacher. We have a library in the building and I need to set up an iMac as a kiosk. Basically the guest account should only have access to adobe acrobat reader and safari. I don’t even want guest users to be able to run basic Apple programs from the applications folder.
How do I do this easily without restricting individual permissions for each and every default Mojave installed app?