Prevent font installation?

[Fluke]

Hi all,

So I've just realised that standard users are able to install fonts onto the college macs (High Sierra and Mojave) and it installs it into the user/library/fonts folder.

This is obviously an issue with licencing with sites like dafont offering free for personal use and shareware fonts which we shouldn't be using - totally free or free for commercial use only!

 

Does anyone know of an easy way of preventing write access to the users font folder or something else to prevent font installation? We use mobile accounts using their AD credentials.

 

Out of interest how do you guys manage issues like this? Currently dafont is blocked completely but would be nice for users to have access to at least see fonts for us to manage the install, but other font sites are still available that we're either going to have to block or find another solution.

 

Ta for any help peeps

[SamanthaD]

Can you redirect the user/library/fonts folder to a shared folder with Read Only access? Maybe something on a network share for easier management for you?