Virtual Network Computing Access, To enable User Mode | Apple 3

Each of these features can be enabled or disabled independently of each other, or you can enable all of Remote Desktop’s features for nonadministrator users.

To enable User Mode:

1Make sure you are logged in as an administrator user.

2Open Remote Desktop.

3Choose Remote Desktop > Preferences.

4Click the Security button.

5Enable or disable features, as desired.

6Close the Preference’s window.

Virtual Network Computing Access

You can use Apple Remote Desktop to access a Virtual Network Computing (VNC) server and view and interact with the server’s screen. VNC access is determined by the VNC server software. To access a VNC server, it is only necessary to know the IP address or fully qualified domain name and the password designated in the VNC server software.

This password does not necessarily correspond to any other password on the system, and is determined by the VNC configuration.

VNC access is similar to Apple Remote Desktop’s Control command. It allows you to use your keyboard and mouse to control a VNC server across a network. It doesn’t give any other Apple Remote Desktop administrator privileges except those of the currently logged-in user.

Non-Apple VNC viewers can control Apple Remote Desktop clients if the client allows it. Allowing a non-Apple VNC viewer access to an Apple Remote Desktop client is less secure than using Apple Remote Desktop to control the client. The VNC protocol implemented in third-party VNC viewers may not encrypt keystrokes sent over the network, so sensitive information can be intercepted.

Warning: Granting VNC access to control a screen is the most powerful feature in Apple Remote Desktop, and can be equivalent to unrestricted access.

Chapter 5 Understanding and Controlling Access Privileges

67

Image 67

Apple 3 manual Virtual Network Computing Access, To enable User Mode

Contents

Administrator’s Guide Apple Computer, Inc Apple Computer, Inc. All rights reserved Contents Using Local Accounts Administrator ComputerUnderstanding and Controlling Access Privileges Apple Remote Desktop Administrator Access Switching Between Control and Observe Modes Setting Up the Network and Maintaining SecuritySetting Up the Network Remote Desktop Authentication and Data Transport Encryption Enabling a Task Notification Script Administering Client ComputersUsing the Task Feedback Display Keeping Track of Task Progress and History 161 Icon and Port Reference Client Status Icons Appendix a Index Appendix BAppendix C Appendix D About This Book What Is Apple Remote Desktop? Remote Desktop Help Using This GuideNotation Conventions Terminal Command Conventions Where to Find More Information About Apple Remote Desktop Preface About This Book Administering Computers Using Apple Remote Desktop Using Apple Remote Desktop Deploying Software Distributing Installer Packages Using NetBoot Images Using Network Install Images Distributing Drag-and-Drop Applications Using Unix Shell ScriptsVerifying Installations Distributing Preference Files ARD SQL Taking Inventory Software Version Report Administration Settings ReportFile Search Report Spotlight File Search Network Test Report Application Usage ReportGenerating Your Own Reports Housekeeping Managing Power State Supporting Users Screen Monitoring Providing Help Desk SupportRequesting Help Chatting with the User Deploying New Software or Files Using ReportsScreen Controlling Screen Sharing Sharing Screens Using Text MessagesInteracting with Students Monitoring Student Computers Finding More Information To learn more about See information for Starting on Remote Desktop Human Interface Guide Getting to Know Remote Desktop Getting to Know Remote Desktop Remote Desktop Main Window Getting to Know Remote Desktop ABG Task Dialogs C D E F G HI Control and Observe Window HA B CI Multiple-Client Observe Window DEF Report Window To change what information is displayed Changing Report Layout To open the Preferences window Configuring Remote DesktopCustomizing the Remote Desktop Toolbar To customize the application toolbar Computers can be selected from any window Interface Tips and Shortcuts Making lists from reports or other lists Drag and drop works on configuration dialogsSaved Tasks and Task Templates save you time NetBoot and Network Install optional Administrator and client computersSystem Requirements for Apple Remote Desktop Network Requirements Installing the Remote Desktop Administrator Software Upgrading the Remote Desktop Administrator Software Upgrading the Client Software Method #1-Remote Upgrade Installation Upgrading Apple Remote Desktop Clients Using SSH Method #2-Manual InstallationTo manually upgrade the client software To upgrade existing client software using SSH Creating a Custom Client InstallerTo create the client installer Installing Apple Remote Desktop Removing or Disabling Apple Remote Desktop Uninstalling the Administrator SoftwareTo remove the administrator software Considerations for Managed Clients Disabling the Client Software To disable the client software on a client computer To uninstall client software Uninstalling the Client Software from Client Computers Computer Lists Finding Clients by Searching a Network Range Finding Clients by Searching the Local NetworkTo search for clients on the local network To search a range of network addresses Finding Clients by Network AddressTo search for a specific address To make a custom search list Finding Clients by File ImportMaking a New Scanner To import a list of computers from a file About Apple Remote Desktop Computer Lists Making and Managing Lists To create an Apple Remote Desktop computer list Creating an Apple Remote Desktop Computer ListDeleting Apple Remote Desktop Lists Creating a Smart Computer List To create an list of computer lists Editing a Smart Computer ListTo create a smart computer list To edit a smart computer list To transfer the computer lists Importing and Exporting Computer Lists To transfer the computer lists To transfer the computer lists Apple Remote Desktop Administrator Access Access Privileges Select To allow administrators to To set administrator privileges on a computer To create an administrator access group Creating Administrator Access GroupsMethod #1 Understanding and Controlling Access Privileges Understanding and Controlling Access Privileges Method #2 Apple Remote Desktop Guest AccessEnabling Directory Services Group Authorization To enable Apple Remote Desktop authorization by group To allow guest access Apple Remote Desktop Nonadministrator AccessLimiting Features in the Administrator Application To enable User Mode Virtual Network Computing Access Managing Client Administration Settings and Privileges Command-Line SSH AccessTo allow VNC access To change administrator privileges on each computer Getting an Administration Settings ReportChanging Client Administrator Privileges To get an administration settings report Understanding and Controlling Access Privileges Setting Up the Network Setting Up the Network Maintaining Security Setting Up the Network and Maintaining Security Maintaining Security Getting the Best Performance Password Access Security Administrator Application SecurityUser Privileges and Permissions Security Physical Access Security Remote Desktop Authentication and Data Transport EncryptionEncrypting Observe and Control Network Data To set a default encryption preference for file copies To enable Observe and Control transport encryption Interacting with Users Controlling Apple Remote Desktop Clients Controlling To control an Apple Remote Desktop client Control Window Options Sharing Control with a User Switching Between Control and Observe ModesTo switch between control and observe modes To switch between complete control and shared mouse modes Capturing the Control Window to a File To switch between standard control and curtain modesTo switch between full screen and in-a-window modes Hiding a User’s Screen While Controlling To control a VNC client computer To share clipboard content with the clientSharing Clipboards for Copy and Paste Controlling VNC Servers Basic steps are Setting up a Non-Mac OS X VNC ServerApple Remote Desktop Control and the PC’s Ctrl-Alt-Del To designate a display to control To set a custom VNC port when adding a computer by addressVNC Control Options To set a custom port on an existing computer list member Observing To configure a client to accept VNC connections Getting More Information on Observed Clients Dealing With Many Client Screens To change your observe settings Changing Observe Settings While Observing To view a user’s account picture Changing Screen Titles While ObservingViewing a User’s Account Picture While Observing To change your observe window titles Icon Indicates To observe a single computer Shortcuts in the Multiple Screen Observe WindowObserving a Single Computer To show system status in the observe window To observe multiple computers To observe using DashboardObserving Multiple Computers Observing a Computer in Dashboard To send a one-way text message Sending MessagesSending One-Way Messages Interactive Chat To view attention requests Sharing ScreensViewing Attention Requests Sharing a Screen with Client Computers Monitoring a Screen Sharing Tasks Interacting with Your Apple Remote Desktop AdministratorRequesting Administrator Attention To request administrator attention Changing Your Observed Client Icon Canceling an Attention RequestTo cancel an attention request To change your login icon Keeping Track of Task Progress and History Administering Client Computers Enabling a Task Notification Script To enable a task notification script Getting Active Task Status Using the Task Feedback DisplayStopping a Currently Running Task To get status on a completed task Getting Completed Task HistorySaving a Task for Later Use To stop a currently running task To create a task template Creating and Using Task TemplatesTo apply a task template To edit a saved task Installing Software Using Apple Remote DesktopInstalling by Package and Metapackage Editing a Saved Task To copy and install software using a .pkg file To install software on offline clients Installing Software on Offline Computers To install software with third-party installers Installing by Using the Copy Items CommandUsing Installers from Other Companies To install software by copying Upgrading Software To upgrade software on client computers Copying Files Copy Options To copy items to clients Copying from Administrator to ClientsMore Options When the Item Already Exists Post-Copy Action To copy items from the Finder to a client Copying Using Drag and DropTo copy items from a client to the administrator’s computer Copying from the Finder to a Client Restoring Items from a Master Copy To restore files using the Copy Items command Collecting Report Data Creating Reports To set up a Task Server, you need to Using a Task Server for Report Data Collection Report Database Recommendations and Bandwidth Usage System Report Size Auditing Client Usage InformationGenerating a User History Report Generating an Application Usage Report To generate a User History reportTo generate an Application Usage report To search for software items using Spotlight Using Spotlight to Find ItemsFinding Files, Folders, and Applications To search for software items Generating a File Search Report Generating a Software Difference Report Comparing SoftwareGenerating a Software Version Report To generate a Software Version report To generate a Software Difference report Auditing HardwareTo get a basic System Overview report To generate a Storage report Getting Serial NumbersTo generate a serial number report Getting Storage Information To generate a FireWire Devices report Getting FireWire Device InformationGetting USB Device Information Getting Network Interface Information To generate a USB Devices reportTo generate a Network Interfaces report To generate a Memory report Getting Memory InformationGetting PCI Card Information Evaluating the Network Test Report Testing Network ResponsivenessTo generate a PCI Cards report To generate a Network Test report To export a report Exporting Report Information Using Report Windows to Work with Computers Deleting Items Maintaining SystemsTo delete an item from a client To set the startup disk Setting the Startup DiskEmptying the Trash To empty the Trash Synchronizing Computer Time Renaming ComputersTo rename a computer To set a computer’s audio volume Setting Computer Audio VolumeTo synchronize client computer clocks To add an application or other item to the Dock Repairing File PermissionsAdding Items to the Dock To repair a computer’s file permissions To change the Energy Saver preferences Changing Energy Saver Preferences Setting Printer Preferences Changing Sharing Preferences for Remote LoginTo change the Remote Login sharing preference To set up printer preferences using Send Unix Command To set up printer preferences using Copy Items Opening Files and Folders Managing Computers To open an item Opening ApplicationsTo open an application To put a computer to sleep Quitting Applications Without Logging Out the UserPutting a Computer to Sleep To quit an open application Locking a Computer Screen Waking Up a ComputerTo wake a computer To create a custom locked screen picture Displaying a Custom Picture on a Locked ScreenUnlocking a Computer Screen To lock a computer screen To log in a user Logging In a User at the Login WindowTo disable a computer screen while you work Disabling a Computer Screen To restart a computer Logging Out the Current UserRestarting a Computer To log out a user To shut down a computer Shutting Down a Computer Send Unix Command Templates Unix Shell Commands Template sub-menu Template name Executing Shell Scripts with Remote Desktop Executing a Single Unix CommandExecuting Scripts Using Send Unix Command To execute a single Unix command To send and execute an AppleScript To execute an AppleScript using the Send Unix CommandTo copy and execute a script Executing AppleScripts with Remote Desktop Using networksetup Built-in Command-Line Tools Few of the capabilities of networksetup are listed below Few of the capabilities of systemsetup are listed below Using systemsetup 150 Shut down the Apple Remote Desktop Agent process Using kickstart Automating Functions Setting the Client’s Data Reporting Policy To set a client’s data reporting policy Creating a Template Data Reporting Policy To set the default data reporting policy template To schedule a task Setting Scheduled TasksScheduled Tasks To set the Task Server location Deleting Scheduled Tasks Using AppleScript with Remote DesktopEditing Scheduled Tasks To edit a task schedule Add v Add a computer to a task Using the Remote Desktop AppleScript DictionaryRemote Desktop’s AppleScript Basics Computer list n inh. item a list which holds computers Sample AppleScript To access the full AppleScript dictionary for Remote Desktop Using Automator with Remote Desktop 160 Appendix Apple Remote Desktop Status Icons Task Status Icons List Menu Icons System Status Icons Detailed System Status Icons Basic Port Protocol Function TCP and UDP Port Reference System Overview Report Report Field Definitions Reference B 166 167 HFS, HFS+, UFS Storage Report PCI Cards Report FireWire Devices ReportUSB Devices Report Memory Report Network Interfaces Report 171 Network Test Report Administration Settings Report User History Report Application Usage Report Remove v Remove a computer from a task Control v Start a control session with the computerExecute v Executes a task Observe v Start an observation session Computer n inh. item a physical computer Elements Contained by application Message Unicode text Message to display on the screens Restart task n inh. task item Restart the target computers Wake up task n inh. task item Wake up the target computers Shutdown task n inh. task item Shutdown the target computers Sample list of system information table Sample list of main database schema Sample list of table from one computer Sample list of property names Index 183 184