Posted on
02-28-2020
06:57 AM
- last edited on
03-04-2025
07:09 AM
by
kh-richa_mig
How can I blacklist the ARDAgent process from running on an enduser system ? As the agent lives in " /System/Library/CoreServices/RemoteManagement/ " I cannot remove it nor can I change permissions on it... Any ideas on how I can completely disable "remote management" outside of just disabling it with kickstart or System Preferences - Sharing ....
Thanks, -clank
Posted on 02-28-2020 09:38 AM
Maybe use 'Restricted software' to kill the binary any time it runs?