Enable Screen Sharing for localadmin acct

New Contributor II

Hello jamf nation!,

I just realized that an old policy that was created by the previous JAMF tech here is no longer working to enable screen sharing. I created a new policy and after some digging around JN I found this to help guide me.

/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -access -off -restart -agent -privs -all -allowAccessFor -allUsers

The thing is I don't want to allow access for all users. Just our localadmin account. Now I tried to change the -allUsers portion but it did not work. Any suggestions?



New Contributor III

@glozano We use a command very similar to the one you list to force screen sharing on.

sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -access -on -users yourUserHere -privs -all -restart -agent -menu

Replace the username with your local admin account

New Contributor II

THANK YOU!!!!!!!!!


New Contributor

If all you want to do is enable screensharing without the additional overhead of ARD, you can try the following:

1) Add your user to the screensharing acl
sudo dscl . -append /Groups/com.apple.access_screensharing GroupMembership <userid>

2) Enable Screen Sharing
sudo launchctl load -w "/System/Library/LaunchDaemons/com.apple.screensharing.plist"

If you want to subsequently disable screen sharing, replace "load" above with "unload".

And if you want to remove the account from the acl, replace "-append" in step 1 above with "-delete"

Oh, if you want to see which user accounts already have access, do:
sudo dscl . -read /Groups/com.apple.access_screensharing | grep GroupMembership

HTH (and works for you!)


Contributor II

I use this script. This ensures access is only given to your admin user.


/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -users YOURADMINACCT -access -on -privs -all -restart
/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -allowAccessFor -specifiedUsers -restart