Skip to main content
Question

enable remote management ?

  • September 28, 2016
  • 2 replies
  • 12 views

Forum|alt.badge.img+20

Is there a better way through the JSS interface to create a policy to turn on 'Remote Management' only for a specific user? instead of having a policy run a script to do it ?

2 replies

Forum|alt.badge.img+18
  • Honored Contributor
  • September 28, 2016

I don't think so. It used to be that the JAMF agent would enable screensharing with the ability to ask permission when controlling a screen, but that broke in 10.10.x I believe, and they have not fixed it.

You could run a "Execute Command" under Files & Processes with:

/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -access -on -users youraccounthere -privs -all -restart -agent -menu

Forum|alt.badge.img+8
  • Valued Contributor
  • September 28, 2016

Been meaning to get with my TAM about this.

Those are the exact kickstart parameters that I intend to use to make sure screen sharing is enabled on all computers system-wide.

We want to make sure end users are given the power to authenticate a remote support session kicked off by our technicians using Casper Remote. Is our best (only?) option to use JSS Settings > JSS User Accounts & Groups > Particular User > Privileges > Uncheck "Screen Share with Remote Computers Without Asking"?