Ard guest access, Command-line ssh access – Apple Remote Desktop 2.2 User Manual
Page 42

42
Chapter 2
Setting Up
16
Choose whether to allow OpenWBEM tools to request data from the client computers.
See “OpenWBEM Access” on page 44 for more information.
17
Click Continue to change the clients’ settings.
The client configuration assistant contacts all of the selected computers and changes
their administration settings.
ARD Guest Access
You can configure an Apple Remote Desktop client to give temporary, one-time access
to an ARD administrator who does not have a login name or password for the client
computer. Each time the ARD administrator would like to control the client computer,
he or she must request permission from the remote client’s user.
To allow guest access:
1
On the client computer, open System Preferences and click Sharing.
On Mac OS X 10.2 clients, select the Remote Desktop pane and skip to step 4.
If necessary, enter the user name and password of a user with administrator privileges
on that computer.
2
Select Apple Remote Desktop in the Sharing Methods pane.
3
Click Access Privileges.
4
Select “Guests may request permission to control screen.”
5
Click OK.
Command-Line ssh Access
When you log in to a client remotely using ssh, you have the user privileges assigned to
the login name and password. These may, or may not, include computer administrator
privileges.
You can use ssh to access a client using a user account created for ARD, but you are
limited to performing whatever tasks were allowed to that user when the account was
created. Conversely, only the users specified in the ARD access privileges can access a
computer using ARD. ARD privileges do not have to be the same as local computer
administrator privileges.
Warning:
Granting access to control a screen is the most powerful feature in ARD,
and can be equivalent to unrestricted access.