estbad.blogg.se

Incidentally, (and not entirely off thread, since it activates these services on demand) I recently posted a way I worked out to set up ARD and SSH access to assets not on the corporate network and posted my methods to a thread requesting that feature from JAMF. usr/libexec/PlistBuddy -c 'Set :ARD_AllLocalUsersPrivs 1073742079' /Library/Preferences/ /usr/libexec/PlistBuddy -c 'Set :ARD_AllLocalUsers true' /Library/Preferences/

System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstartįor making sure they do not limit "Allowed accounts" to no one, or deselect ARD options: I didn't bother with SSH, since if we have guaranteed full access with ARD, we could always use it to turn SSH back on.

Although in retrospect, you would probably want to edit to provide access for just your admin user instead of all. I worked this out a few years ago, before we got Casper. Sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -activate -restart -console Sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -users xxxxxxxxx -access -on -privs -all Sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -allowAccessFor -specifiedUsers read /Users/xxxxxxxxx GeneratedUID | cut -d " " -f 2` append /Groups/_ssh GroupMembership XXXXXX Sudo dseditgroup -o edit -d admin -t group _ssh Adds xxxxxxxxx User to Remotelogin then activates. Removes Administrators Group from Remote login, 2 & 3. # Enable ARD, Remote Management, and Remote Login (SSH) - 1. Heres how I enable ARD, Remote Management and remote login for one user/group (Local administrator account)