Ensure Remote Management Is Disabled

ВисокаНиво 1Аутоматскаmacos

Опис

Remote Management is the client portion of Apple Remote Desktop (ARD). Remote Management can be used by remote administrators to view the current screen, install software, report on, and generally manage client Macs. The screen sharing options in Remote Management are identical to those in the Screen Sharing section. In fact, only one of the two can be configured. Audit: Passes when no ARDAgent process is running.

Како се проверава

Метод провере: Команда љуске

shell

[ -x /usr/bin/sw_vers ] || exit 1
out=$(/bin/ps -axo comm= 2>/dev/null) || exit 1
printf '%s\n' "$out" | /usr/bin/grep -c ARDAgent || true

Очекивани излаз: 0

Како се исправља

Метод исправке: Смерница или закрпа инфраструктуре

Terminal: sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources /kickstart -deactivate -stop. GUI: System Settings > General > Sharing > Set Remote Management to disabled.

Својства

Оперативни системи: macos-26
Ознаке: macossystem-settings
Референца: CIS Apple macOS 26 Tahoe Benchmark v1.1.0 - 2.3.3.5 Ensure Remote Management Is Disabled

Проверите овај рачунар

Покрените ово на рачунару за који имате дозволу за проверу. Скенирање ради у режиму само за читање.

shell

tmaegis scan --target macos