enable remote management ?

[tcandela]

Is there a better way through the JSS interface to create a policy to turn on 'Remote Management' only for a specific user? instead of having a policy run a script to do it ?

[dgreening]

I don't think so. It used to be that the JAMF agent would enable screensharing with the ability to ask permission when controlling a screen, but that broke in 10.10.x I believe, and they have not fixed it.

You could run a "Execute Command" under Files & Processes with:

/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -access -on -users youraccounthere -privs -all -restart -agent -menu

[cpdecker]

Been meaning to get with my TAM about this.

Those are the exact kickstart parameters that I intend to use to make sure screen sharing is enabled on all computers system-wide.

We want to make sure end users are given the power to authenticate a remote support session kicked off by our technicians using Casper Remote. Is our best (only?) option to use JSS Settings > JSS User Accounts & Groups > Particular User > Privileges > Uncheck "Screen Share with Remote Computers Without Asking"?