Skip to main content
Question

blacklisting the ARDAgent

  • February 28, 2020
  • 1 reply
  • 7 views

Forum|alt.badge.img+3

How can I blacklist the ARDAgent process from running on an enduser system ? As the agent lives in " /System/Library/CoreServices/RemoteManagement/ " I cannot remove it nor can I change permissions on it... Any ideas on how I can completely disable "remote management" outside of just disabling it with kickstart or System Preferences - Sharing ....

Thanks, -clank

1 reply

Tangentism
Forum|alt.badge.img+10
  • Honored Contributor
  • February 28, 2020

Maybe use 'Restricted software' to kill the binary any time it runs?