 “Apple Remote Desktop Administrator Access” on page 65
 “Apple Remote Desktop Administrator Access Using Directory Services” on page 69
 “Apple Remote Desktop Guest Access” on page 72
 “Apple Remote Desktop Nonadministrator Access” on page 73
 “Virtual Network Computing Access” on page 74
 “Command-Line SSH Access” on page 75
 “Managing Client Administration Settings and Privileges” on page 75
Apple Remote Desktop Administrator Access
Access privileges allow an Apple Remote Desktop administrator to add computers to a
list and then interact with them. If no access privileges are allowed on a client
computer, that computer cannot be used with Apple Remote Desktop. Access
privileges are defined in the Remote Management section of the Sharing pane of each
client computer’s System Preferences. In Mac OS X version 10.4 or earlier, access
privileges are defined in the Apple Remote Desktop section of the Sharing pane of
each client computer’s System Preferences.
The recommended access privileges for a client computer depend on how it’s used.
 If the computer is used in a public area, such as a computer lab, you may want to
allow administrators full access privileges.
66
Chapter 5
Understanding and Controlling Access Privileges
 If the computer is used by one person, you may not want to give administrators full
access privileges. Also, you may want a user who administers his or her own
computer to take responsibility for creating passwords and setting the access
privileges for the computer
The following table shows the Remote Management options in the Sharing Preference
pane and the features of Remote Desktop that they correspond to. For example, if you
want a certain administrator to be able to rename computer file-sharing names, you
need to grant that administrator the privilege by selecting “Change settings.”
WARNING:
Apple Remote Desktop administrator access can be used maliciously—for
example, to take unauthorized control of a user’s screen or delete a user’s files. Be
very careful when deciding who receives administrator access and which access
privileges they receive.
Select
To allow administrators to
Control
Use these Interact menu commands: Control, Share Screen, Lock
and Unlock Screen.
This item must be enabled in order to use the Upgrade Client
Software and Change Client Settings features.
Show when being observed
Automatically change the status icon to notify the user when the
computer is being observed or controlled.
For more information, see “Apple Remote Desktop Status Icons” on
page 177.
Generate reports
Create hardware and software reports using the Report menu; use
Set Reporting Policy and Spotlight Search.
Open and quit applications
Use these Manage menu commands: Open Application, Open
Items, Send UNIX Command and Log Out Current User.
Change settings
Use these Manage menu commands: Rename Computer, Send
UNIX Command and Set Startup Disk.
Delete and replace items
Use these Manage menu commands: Copy Items, Install Packages,
Send UNIX Command and Empty Trash. Also delete items from
report windows.
This item must be enabled in order to use the Upgrade Client
Software feature.
Send text messages
Use these Interact menu commands: Send Message and Chat.
Restart and shut down
Use these Manage menu commands: Sleep, Wake Up, Restart,
Send UNIX Command, and Shut Down.
This item must be enabled in order to use the Upgrade Client
Software feature.
Copy items
Use these Manage menu and Server menu commands: Copy
Items, Send UNIX Command and Install Packages.
This item must be enabled in order to use the Upgrade Client
Software and Change Client Settings features.
Chapter 5
Understanding and Controlling Access Privileges
67
If you allow access to the computer using Apple Remote Desktop, the administrator
can see the client computer in the Computer Status window and include it in Network
Test reports, even if no other options are selected.