If you are new to Apple management, one word of advice. You do it Apples way, or you don't do it at all. Apple no longer allows Remote Management to be enabled programmatically, there is no way around this or to force it. You can enable Screen Sharing with an MDM command on Supervised Devices which allows you to use ARD or Screen Sharing to access a device for support situations which really has nothing to do with deployment.
What is your current deployment process?
Remote connection to the gui is sort of a 'nice to have feature', but not strictly necessary in my opinion; as you did deeper into jamf function, you'll find there is almost always a way to do what you need, whether they be PPPC Payloads, or package installs, with scripts, or standalone scripts or the commands apple builds into the command line.
If you GUI connections as and absolute last resort, and typically not necessary, you'll start to like jamf and apple's method's a lot more.
i've come other believe that if I have to touch a user's mac, something went wrong, art sounds goofy, but i find it helps to view every issue, no matter what it is, how would I do this, if i couldn't touch the computer?
M
Your mileage may vary, but here's a Jamf Script:
https://github.com/jamf/Jamf-Nation-Scripts/blob/master/enableARD.sh
You just need to enter your "targetUsername" in the script.
Remote connection to the gui is sort of a 'nice to have feature', but not strictly necessary in my opinion; as you did deeper into jamf function, you'll find there is almost always a way to do what you need, whether they be PPPC Payloads, or package installs, with scripts, or standalone scripts or the commands apple builds into the command line.
If you GUI connections as and absolute last resort, and typically not necessary, you'll start to like jamf and apple's method's a lot more.
i've come other believe that if I have to touch a user's mac, something went wrong, art sounds goofy, but i find it helps to view every issue, no matter what it is, how would I do this, if i couldn't touch the computer?
M
Apple protects screen recording permissions pretty hard. You can toggle Screen Recording off and on for supervised devices as a mass action or in the inventory record, it must be an MDM command so this cannot be scripted beyond scripting Jamf API commands to do this. Once Screen Recording has been enabled, you can use shell scripts to change who has access to what.
PrivacyPreferencesPolicyControl.Services | Apple Developer Documentation
Apple protects screen recording permissions pretty hard. You can toggle Screen Recording off and on for supervised devices as a mass action or in the inventory record, it must be an MDM command so this cannot be scripted beyond scripting Jamf API commands to do this. Once Screen Recording has been enabled, you can use shell scripts to change who has access to what.
PrivacyPreferencesPolicyControl.Services | Apple Developer Documentation
ah, thats a good point, good to know that some of those things are being added back as mass actions.
