Skip to main content
Question

Screen Sharing

  • September 28, 2012
  • 5 replies
  • 2 views

ImAMacGuy
Forum|alt.badge.img+23

I have a request from a department to have some sort of screen sharing ability on some remote machines. Security's requirement is that it authenticates against AD/LDAP.

Since the internal VNC doesn't do that, I was thinking screen sharing. but it only seems to let me authenticate if I use my local admin account - which I don't want to be the case...

So my question is - is there a VNC app that can have a plugin to work with LDAP/AD or is there a way to use screensharing in that method?

5 replies

mscottblake
Forum|alt.badge.img+24
  • Honored Contributor
  • 341 replies
  • September 28, 2012

In the Sharing preferences, is access being allowed for all users? I'm thinking that it is specifying that only your admin account be allowed access.


bentoms
Forum|alt.badge.img+35
  • Hall of Fame
  • 4331 replies
  • September 29, 2012

@John, iirc ARD allows you to add domain accounts/groups.

Are these PC techs?

Tbh, I'm looking at something similar. VNC might not work as you need the logged in users account details to join their session.


Forum|alt.badge.img+17
  • Honored Contributor
  • 1143 replies
  • October 2, 2012

I'm probably missing something obvious, but why not Casper Remote? Don't want to support the app, or maybe they are PC users?

We have Casper Remote set up so only certain AD users can use it and users are always prompted.


Forum|alt.badge.img+24
  • Valued Contributor
  • 1892 replies
  • October 2, 2012

If I had to guess, he doesn't want to use Casper Remote as it gives remote to all the machines in the environment and not just an enclave. That whole federated control model we've been looking for for years...


Forum|alt.badge.img+31
  • Honored Contributor
  • 2721 replies
  • October 3, 2012

I think Jared is on to something here. Casper Remote privileges can be set to an LDAP group. It would also allow the remote user to look up computers by name, or whatever else is in inventory. You can further force them to request VNC access too, so they cannot just connect with out the end user allowing it.

-Tom