Introduction
This document describes how dataJAR can configure Apple Remote Desktop for computers managed as part of our datajar.mobi service.
Apple Remote Desktop is a suite of tools provided by Apple that allows you to perform the following tasks on computers connected to the same local area network (e.g. a classroom):
- Control the screen and message users, allowing them to interact with you.
- Create different lists of computers so they can be managed effectively
- Manage computers remotely, send files, and update settings
Apple Remote Desktop consists of the following components:
- The Apple Remote Desktop application (client). This is installed on one computer and used to connect to and control other computers. It must be purchased from Apple School/Business Manager and deployed as a Volume Purchase/Managed Distribution application.
- Apple Remote Desktop is based on the VNC protocol but other VNC clients may be used in a limited capacity. The official Apple Remote Desktop application offers the optimal experience and most features.
- The Apple Remote Desktop agent (server). This is included with macOS on every Mac. dataJAR can enable and configure the agent on Macs managed with datajar.mobi.
For more information about how to use Apple Remote Desktop, please see the user guide here: https://support.apple.com/en-gb/guide/remote-desktop/welcome/mac
Due to changes made by Apple, as of macOS 12 Apple Remote Desktop can no longer be enabled automatically during enrolment/setup.
For more information about this change please refer to the below support article: https://support.apple.com/kb/HT209161
Please use Insights to enable Apple Remote Desktop for target computers, under Computers > MDM Management > Enable Remote Desktop:
Agent Configuration options
The Apple Remote Desktop agent is disabled by default for Macs managed in datajar.mobi. If you would like it to be enabled, please submit a service request.
dataJAR can enable and configure Apple Remote Desktop with the following options:
- Enabled for a specific local administrator or Active Directory user so only that user can log into remote computers (the computer must be joined to Active Directory).
- Enabled for a specific Active Directory Security Group so users in that group can log into remote computers (the computer must be joined to Active Directory).
By default, Apple Remote Desktop allows signing in with any local administrator credentials that are present on the target computer. The screen will be shared and controllably for any user who is logged into the computer locally.
To restrict sign in with Apple Remote Desktop for specific users/Active Directory Groups, please raise a ticket with our support team.
Connecting to computers
The following clients can be used to connect to computers running the Apple Remote Desktop service and all support authentication with local and Active Directory users, if configured as above.
macOS
- Apple Remote Desktop: https://apps.apple.com/gb/app/apple-remote-desktop/id409907375?mt=12
- Screen Sharing: https://support.apple.com/en-gb/guide/mac-help/mh14066/mac
- Remotix: https://remotix.com/en/
iOS
- Remotix: https://remotix.com/en/
Android
- Remotix: https://remotix.com/en/
Microsoft Windows
- RealVNC: https://www.realvnc.com/en/
- Remotix: https://remotix.com/en/
Need further support?
Automate. Simplify. Succeed. If you still require assistance with us or have any further questions, please raise a ticket with our support team.
Alternatively, please see our frequently updated knowledge base articles for reference.