Permissions for Remote Access?

[ImAMacGuy]

I have setup a group to allow for remote access, however none of the LDAP or local account users in that group can access it. They all get "permission denied to share screen" when they try to screen share from Casper Remote

They do have the casper remote privs and specifically stated remote access privs, but it appears there are other dependencies that they don't have, and i'm not sure which are required.

If I use my admin account it works, but I don't want to give everybody full admin access.

[asditsupport]

Cross check on JSS - Account Settings, privileges for the users from whom the access denied message is appearing (you could try granting all privileges just to check on dependencies). If they all have the permissions granted, the second thing to check for is if the client has SSH enabled and that the username and password used to enroll the client is an admin on that particular client with ssh privileges.

[andrew_stenehje]

We have the same thing; we use the ard_admin group to manage who can screen share and Casper Screen Sharing gives us errors. The way we can get around it is to create a custom ARD package that adds an account named "casperscreensharing", as well as pointing to the directory group ard_admin. It sounds like ours doesn't work because the "casperscreensharing" account that Casper creates for screen sharing sessions isn't in the ard_admin group.