Posted on 02-28-2020 06:57 AM
How can I blacklist the ARDAgent process from running on an enduser system ? As the agent lives in " /System/Library/CoreServices/RemoteManagement/ " I cannot remove it nor can I change permissions on it... Any ideas on how I can completely disable "remote management" outside of just disabling it with kickstart or System Preferences - Sharing ....
Thanks, -clank
Posted on 02-28-2020 09:38 AM
Maybe use 'Restricted software' to kill the binary any time it runs?