Remote Desktop: Understanding privileges and security

Remote Desktop in Sharing preferences

It is not necessary to use an administrative user when assigning privileges in the Remote Desktop pane of Sharing preferences. For improved security, you should use a non-administrative user to restrict access privileges.

If multiple users will be administering a computer with different needs, create separate user accounts on the computer and assign privileges accordingly.

For information on the privileges in Sharing preferences, refer to page 60 in the ARD 3 Admin Guide or pages 38 and 39 in the ARD 2.2 Admin Guide.

Non-administrative users using the admin application ("user mode")

Restrictions for non-admin users are defined in the Security section of Remote Desktop administrators's preferences window. Only administrators may change these settings. For information on user mode settings, refer to page 66 in the ARD 3 Admin Guide or page 51 in the ARD 2.2 Admin Guide.

These settings are designed to prevent non-administrative users from using certain features within the admin application. If you have a user who needs limited access to features, in addition to specifying user mode restrictions, you should create a new user account on the client computer and define privileges accordingly.

For example, if Rita needs to be able to install packages onto clients and obtain reports, create a new user account on the client systems and then assign her the appropriate privileges in the Remote Desktop pane of Sharing preferences, as described above.

 

Published Date: Feb 20, 2012