Posted on 09-09-2019 09:35 AM
How do i enable remote login and remote management on a mac 10.14.6 , machine is on a different site and i need to to enable it remotely .I have tried the script,ARD management,
Do we have any other option ?
I am able to just observe the machine, not able to control or enter the admin credentials .
Posted on 09-09-2019 09:39 AM
You need to first deploy the configuration profile I've pasted below ( took this from @allanp81 via this thread - https://www.jamf.com/jamf-nation/discussions/29233/enable-remote-management-full-control-in-mojave
<?xml version="1.0" encoding="UTF-8"?>
<!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST 1.0//EN" "http://www.apple.com/DTDs/PropertyList-1.0.dtd">
<plist version="1.0">
<dict>
<key>PayloadContent</key>
<array>
<dict>
<key>PayloadDescription</key>
<string>Screen Sharing Enable</string>
<key>PayloadDisplayName</key>
<string>Screen Sharing Enable</string>
<key>PayloadIdentifier</key>
<string>63DFC01F-E3AF-43FD-941C-317AA4309C33</string>
<key>PayloadOrganization</key>
<string>Kingston University</string>
<key>PayloadType</key>
<string>com.apple.TCC.configuration-profile-policy</string>
<key>PayloadUUID</key>
<string>C99E0187-FB1B-4F5A-A14B-344F9E2C59C9</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>Services</key>
<dict>
<key>PostEvent</key>
<array>
<dict>
<key>Allowed</key>
<true/>
<key>CodeRequirement</key>
<string>identifier "com.apple.screensharing.agent" and anchor apple</string>
<key>Comment</key>
<string>Allow Control mode when starting Remote Management via kickstart</string>
<key>Identifier</key>
<string>com.apple.screensharing.agent</string>
<key>IdentifierType</key>
<string>bundleID</string>
</dict>
</array>
</dict>
</dict>
</array>
<key>PayloadDescription</key>
<string>Screen Sharing Enable</string>
<key>PayloadDisplayName</key>
<string>Screen Sharing Enable</string>
<key>PayloadIdentifier</key>
<string>63DFC01F-E3AF-43FD-941C-317AA4309C33</string>
<key>PayloadOrganization</key>
<string>Kingston University</string>
<key>PayloadType</key>
<string>com.apple.TCC.configuration-profile-policy</string>
<key>PayloadUUID</key>
<string>B8711922-EB7B-4BB3-A9AF-B430CFB3ED97</string>
<key>PayloadVersion</key>
<integer>1</integer>
<key>payloadScope</key>
<string>system</string>
</dict>
</plist>
& once you've deployed the configuration profile, then you can run the kickstart commands
example:
echo "Enabling Apple Remote Desktop Agent..."
/System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -activate -configure -allowAccessFor -specifiedUsers
echo "Setting Remote Management Privileges for User: $targetUsername ..." /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -access -on -privs $privs -users $targetUsername
Posted on 03-12-2020 07:44 AM
Thanks for this. If I only want to use Jamf Remote, and not Apple Remote Desktop, are the steps still the same?
Posted on 04-09-2020 11:22 AM
edit nevermind