blacklisting the ARDAgent

colonelclank
New Contributor II

How can I blacklist the ARDAgent process from running on an enduser system ? As the agent lives in " /System/Library/CoreServices/RemoteManagement/ " I cannot remove it nor can I change permissions on it... Any ideas on how I can completely disable "remote management" outside of just disabling it with kickstart or System Preferences - Sharing ....

Thanks, -clank

1 REPLY 1

Tangentism
Contributor

Maybe use 'Restricted software' to kill the binary any time it runs?