I have some machines with Apple Remote Desktop turned on via /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart and some parameters for users.
Now I want to remove it for these machines. From what I can tell there are multiple parts to this:
- Turn of ARD and remove all access with /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -deactivate -configure -access -off
- Remove the Firewall entry
To remove the firewall entry IF it exists is there a simple way to do this?
Or do I have to list all firewall rules, parse it, find ARDAgent.app and remove it?
Update:
So I've been playing around with this and now "/usr/libexec/ApplicationFirewall/socketfilterfw --list" doesn't list any rules for ARD even if it's turned on with "/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -allowAccessFor -specifiedUsers".
I can however see the Remote Management and Screen Sharing rules in System Preferences Firewall Options...