Sign in as an administrator to change this setting remote desktop

Enable directory services group authorization.

  • Select Set Remote Desktop access mode to choose whether to give uniform remote management access privileges to all local users, or to give access to specific local users. If you deselect this, the client computers settings are used.

  • Choose whether you want to set remote management access privileges for specific users. If you choose not to set remote management access privileges for specific users, skip to step 8.

  • In Access Privileges, click Add to add a user, or select an existing user and click Edit. Provide the users short name and set the privileges. Then click Continue.

    For information, see About access privileges.

  • In Screen Sharing Options, do the following, then click Continue.

    • Choose to allow temporary access to a guest administrator when the administrator requests permission on the client computers.

    • Choose whether to allow computers running non-Apple VNC software to control the client computers.

    For information, see Virtual network computing access and control.

  • In System Data, enter information about this computer that you want to appear in System Overview reports. For example, you can enter a serial number, asset tag number, or a users name. Then click Continue.

  • Review your settings, and choose to execute the change using the app or a dedicated Task Server. Then click Change.

    For information, see Configure a remote Task Server.

    The client configuration assistant contacts all selected computers and changes their administration settings.

  • Set access privileges using directory services

    If the client computers are bound to a directory service, you can grant Remote Desktop administrator access to specific groups in the directory without enabling any local users.

    Because you can grant access using named groups from your directory services domain, you dont have to add users and passwords for authorization. When directory services authorization is enabled on a client, the user name and password an administrator enters when authenticating to the computer are checked in the directory. If the name belongs to one of the Remote Desktop access groups, the administrator is granted the access privileges assigned to the group.

    • Do one of the following:

      • Use predefined groups with names that correspond to the privilege keys: ard_admin, ard_interact, ard_manage, and ard_reports.

        If the groups dont already exist in the directory, you can create new groups with the reserved names.

        The group names correspond to Managed Preferences keys and have the same privileges as the key. The corresponding privileges are automatically assigned to these specially named groups. Theres no need to add the Managed Preferences key to the group record.

      • Create groups and assign them privileges through the MCXSettings attribute on any computer record, any computer group record, or the guest computer record.

    Management privilege

    ard_admin

    ard_reports

    ard_manage

    ard_interact

    Generate reports

    About access privileges.

    Each task can be enabled independent of the others, or you can enable all Remote Desktop features for non-administrator users. Make sure youre logged in as an administrator user.

    1. In Remote Desktop Manage computers with Remote DesktopTips and shortcuts for working with Remote DesktopEncrypt network data in Remote Desktop

      Video liên quan

      Chủ Đề