Apple Remote Desktop Help
Index

# Apple Remote Desktop Administrator Access

Access privileges allow an Apple Remote Desktop administrator to add computers to a list and then interact with them. If no access privileges are allowed on a client computer, that computer cannot be used with Apple Remote Desktop. Access privileges are defined in the Remote Management section of the Sharing pane of each client computer's System Preferences. In Mac OS X version 10.4 or earlier, access privileges are defined in the Apple Remote Desktop section of the Sharing pane of each client computer's System Preferences.

The recommended access privileges for a client computer depend on how it's used.

- If the computer is used in a public area, such as a computer lab, you may want to allow administrators full access privileges.
- If the computer is used by one person, you may not want to give administrators full access privileges. Also, you may want a user who administers his or her own computer to take responsibility for creating passwords and setting the access privileges for the computer

  WARNING: Apple Remote Desktop administrator access can be used maliciously—for example, to take unauthorized control of a user's screen or delete a user's files. Be very careful when deciding who receives administrator access and which access privileges they receive.

The following table shows the Remote Management options in the Sharing Preference pane and the features of Remote Desktop that they correspond to. For example, if you want a certain administrator to be able to rename computer file-sharing names, you need to grant that administrator the privilege by selecting "Change settings."

Select | To allow administrators to
--- | ---
Control | Use these Interact menu commands: Control, Share Screen, Lock and Unlock Screen.This item must be enabled in order to use the Upgrade Client Software and Change Client Settings features.
Show when being observed | Automatically change the status icon to notify the user when the computer is being observed or controlled.For more information, see Apple Remote Desktop Status Icons.
Generate reports | Create hardware and software reports using the Report menu; use Set Reporting Policy and Spotlight Search.
Open and quit applications | Use these Manage menu commands: Open Application, Open Items, Send UNIX Command and Log Out Current User.
Change settings | Use these Manage menu commands: Rename Computer, Send UNIX Command and Set Startup Disk.
Delete and replace items | Use these Manage menu commands: Copy Items, Install Packages, Send UNIX Command and Empty Trash. Also delete items from report windows.This item must be enabled in order to use the Upgrade Client Software feature.
Send text messages | Use these Interact menu commands: Send Message and Chat.
Restart and shut down | Use these Manage menu commands: Sleep, Wake Up, Restart, Send UNIX Command, and Shut Down.This item must be enabled in order to use the Upgrade Client Software feature.
Copy items | Use these Manage menu and Server menu commands: Copy Items, Send UNIX Command and Install Packages.This item must be enabled in order to use the Upgrade Client Software and Change Client Settings features.

If you allow access to the computer using Apple Remote Desktop, the administrator can see the client computer in the Computer Status window and include it in Network Test reports, even if no other options are selected.

See:

- Setting Apple Remote Desktop Administrator Access Authorization and Privileges Using Local Accounts in Mac OS X v10.5
- Setting Apple Remote Desktop Administrator Access Authorization and Privileges Using Local Accounts in Mac OS X v10.4