Skip navigation

How to Add/Remove user account priveleges via ARD ?

626 Views 7 Replies Latest reply: Aug 19, 2013 11:52 AM by varjak paw RSS
Uncle_Badger Level 1 Level 1 (0 points)
Currently Being Moderated
Aug 14, 2013 3:46 AM

Buenos dias,

 

I would like to know if there is an easy way to make an END USER an administrator of THEIR MAC using ARD.

 

 

There is a lot of chatter and advice about admin priveledges for the actual program ARD but that is not the advice we seek.

 

 

The scenario is this:

 

 

All Mac users in the business are not admins of their own machine - as such they are unable to tinker with system settings (delete printers/servers/network settings etc.)

 

I would like to to temporarily elevate the user to Admin EG: To allow an artworker to install plug-ins.

 

I would then like to remove the permissions.

 

Please can anyone let me know a quick bit of code we can script up to make the magic happen.

 

 

I look forward to hearing from you

 

 

Thanks

 

Gareth

MacBook Pro, Mac OS X (10.7.3), 13" i5 4GB
  • varjak paw Level 10 Level 10 (167,155 points)

    I don't know if this still works with more recent versions of OS X, but this was the procedure for earlier versions:

     

    Send the following UNIX command to the target computers as the "root" user:

     

    dscl / -append /Groups/admin GroupMembership ARDusername

     

    where "ARDusername" is the user you want to add to the admin group.

     

    Try that on a test system and see if it still works with current OS X versions. The dscl command is still present, but the group name or syntax may have changed.

     

    Regards.

    iMac, OS X Mountain Lion (10.8.3), Core i7 3.4Ghz GeForce GTX 680MX
  • varjak paw Level 10 Level 10 (167,155 points)

    I would presume you'd use dscl / -delete in place of -append, but read the man page for dscl for details.

     

    Regards.

  • jhochwald Calculating status...

    Hi,

     

    I use this in my setup scripts:

    # Default Admin User (e.g. for ARD)
    # Note: Adjust this before starting the Script
    my_ADM="MYADMIN"

    /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -access -off

    /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/kickstart -configure -access -on -privs -all -users $my_ADM

     

    Just replace the my_ADM variable with the user/users you would like to add. (I run the script as superuser!)

     

    Need more Info? Here is how to get it:

    sudo /System/Library/CoreServices/RemoteManagement/ARDAgent.app/Contents/Resources/k ickstart --help

     

    Hope this helps :-)

     

    /JH

  • varjak paw Level 10 Level 10 (167,155 points)

    I believe that command would add someone as an ARD administrator, but would not make the user an adminstrator of the Mac, which is what Uncle Badger wants to do.

     

    Regards.

  • jhochwald Level 1 Level 1 (0 points)

    Goo one,

    But the question is in the ARD Forum... Therefore: Yes, but as long as the User is a ARD Admin you are able to execute commands and/or installations via remote as an admin.

     

    /JH

  • varjak paw Level 10 Level 10 (167,155 points)
    Currently Being Moderated
    Aug 19, 2013 11:52 AM (in response to jhochwald)

    Yes, I am well aware that this is the ARD forum. Please read the first sentence of the original post again:

     

    I would like to know if there is an easy way to make an END USER an administrator of THEIR MAC using ARD.

     

    Uncle Badger again wants to use ARD to make a user a Mac OS X administrator. He does not want to add an ARD administrator, nor does he want to allow someone to remotely execute commands.

     

    Regards.

Actions

More Like This

  • Retrieving data ...

Bookmarked By (0)

Legend

  • This solved my question - 10 points
  • This helped me - 5 points
This site contains user submitted content, comments and opinions and is for informational purposes only. Apple disclaims any and all liability for the acts, omissions and conduct of any third parties in connection with or related to your use of the site. All postings and use of the content on this site are subject to the Apple Support Communities Terms of Use.