TMA-MACOS-2.3.3.5
Ensure Remote Management Is Disabled
Description
Remote Management is the client portion of Apple Remote Desktop (ARD). Remote Management can be used by remote administrators to view the current screen, install software, report on, and generally manage client Macs. The screen sharing options in Remote Management are identical to those in the Screen Sharing section. In fact, only one of the two can be configured. Audit: Passes when no ARDAgent process is running.
Méthode de vérification
Méthode d'audit: Commande shell
[ -x /usr/bin/sw_vers ] || exit 1
out=$(/bin/ps -axo comm= 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -c ARDAgent || true- Sortie attendue
0
Méthode de correction
Méthode de correction: Recommandation ou correctif d'infrastructure
Terminal: sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources /kickstart -deactivate -stop. GUI: System Settings > General > Sharing > Set Remote Management to disabled.
Propriétés
- Systèmes d'exploitation
- macos-26
- Étiquettes
- macossystem-settings
- Référence
- CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.3.3.5 Ensure Remote Management Is Disabled
Vérifier cet hôte
Exécutez cette commande sur une machine que vous êtes autorisé à auditer. L'analyse est en lecture seule.
tmaegis scan --target macos