Ive been noticing an error that seems to be popping up more and more lately in our environment with screen-sharing through Casper Remote.
Over the last week, Ive had a handful of clients I've tried to screen-share and get all the way through up to the users clicking "Allow", after which I receive the following error upon "screen-sharing starting".
I've checked the machines, and verified screen-sharing and remote login are both enabled, but I still receive this error. I'm not really sure what it could be, I can still SSH to the users via terminal, and run commands from there.
Im kind of stumped, and wanted to see if anyone else has seen a similar issue with screen sharing as of late?
We recently had this issue. Have you used two different quickadd packages in the past? We found that machines that had a different ADMIN account name than what JSS was using to communicate with. If you have changed the ADMIN account name that JSS uses recently, this could be your issue. To quickly check this, add in your inventory search the admin accounts field, and see if the JSS Admin accounts are all the same. Hope this helps! Let me know..
@mm2270 - I was wondering if maybe it had something to do with Yosemite in relation to Casper Remote. Now that I think about it, I am almost certain I never came across this error prior to our uplift. Also, yes they were enabled, which is what I thought was rather odd, since in the past it was usually because someone disabled it manually(a lot of our users are admins). Ill continue to search the forums and investigate, and post back if I find anything substantial.
@WatchtowerCasper - We havent changed the admin accounts, but I did check this anyway to see if I could find a mismatch, but sadly they all checked out. Thanks for the suggestion though!
Does anyone know if this is a OS X only error or has this to be fixed by JAMF too?
Edit: Here's an workaround for that:
sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -access -off -restart -agent -privs -all -allowAccessFor -allUsers
On a side note, if Remote Management is set to allow all users, any user that Mac knows about (including all directory users) can use ARD to send remote commands as the root user.
I've seen this issue in schools before where a student (non-admin AD account) had a copy on a USB stick and used it to send remote root commands to other Macs on the network.
I would use ```
``` and then
-configure -access -on -users localadmin -privs -all
to specify which user is allowed to access the Mac using ARD.
Use the following commands you've disabled Remote Management using kickstart or whatever method you like (that needs to happen first)
sudo defaults write /var/db/launchd.db/com.apple.launchd/overrides.plist com.apple.screensharing -dict Disabled -bool false sudo launchctl load /System/Library/LaunchDaemons/com.apple.screensharing.plist
That will enable ScreenSharing and get it started and working.
To flip it back off just change the false after -bool to true, and also change load to unload in the launchctl command.
@dgreening -hmm, not sure why. Are you sure Remote Management is disabled? Wondering if that's something you'd see if it was still on since the Screen Sharing process can't be enabled when ARD management is on at the same time.
I can try the commands on one of our 10.10.2 Macs to see if I get the same issue. I'll let you know.
@dgreening - I got the same error on a 10.10.2 box after first disabling Remote Management with kickstart and rebooting and then writing the bool value into the overrides.plist and finally trying to enable the LaunchDaemon. After some investigating, its because the plist has a Disabled - true key in it. It seems to ignore the overrides file for some reason, so....
try running the launchctl command like this instead:
sudo launchctl load -w /System/Library/LaunchDaemons/com.apple.screensharing.plist
That seemed to work for me.
mine is now behaving as it should, prompting users when issuing a screen share through casper remote. i'm not certain what the fix truly was since i unchecked the "screen share without prompting" setting and then bounced the JSS. the good news is i'm back in business...
thanks to all for the suggestions...
We've been having problems with Casper Remote also failing to connect in the last step of Screen Sharing ever since going to casper 9.9x. We are running Mac OS El Capitan on our machines. We are also having the problem with our Apple Remote Desktop. We have discovered that if we attempt screen sharing with ARD and then try to screen share the same machine via Casper Remote, at the same time, that it will usually start to successfully screen share via one of the programs. We haven't verified, but it appears that each attempt at screen sharing will up the port number by one, and eventually will get to a port number it likes and screen sharing starts.
For anyone still experiencing this issue. I am seeing that upon disconnect the casperscreensharing user is not being removed from the system. rm -rf /var/casperscreensharing ; dscl . -delete "/Users/casperscreensharing" followed by the enableARD.sh script.
Seems to restore functionality
Check out my post for Terminal commands needed to be run after installing the QuickAdd.pkg in order to lock down only JAMF Remote user from being able to Screen share.
Also be aware that JSS v10.50 the jamf binary symlink is broken (sudo jamf ..... in Terminal will not work) so that might be also causing issues.
For screen sharing not presenting a prompt to access I have found that if the User Privilege is set to not prompt for screen sharing you are unable to uncheck that box for existing users (at least if cloning an account).